diff --git a/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/etc/nevis/k8s-nevisproxy-idp-0ceb05c56644a59d648c13b9.yaml b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/etc/nevis/k8s-nevisproxy-idp-0ceb05c56644a59d648c13b9.yaml
index b02b6f9..bce35d5 100644
--- a/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/etc/nevis/k8s-nevisproxy-idp-0ceb05c56644a59d648c13b9.yaml
+++ b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/etc/nevis/k8s-nevisproxy-idp-0ceb05c56644a59d648c13b9.yaml
@@ -46,7 +46,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-62662ede470107ec5096dcb2a1eeea54ac2b8773"
+    tag: "r-de3192aa36a48a0c9e2734af2cfd5bc3b60701a0"
     dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/utility_resource_service_countries_security_filter.lua b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/utility_resource_service_countries_security_filter.lua
new file mode 100644
index 0000000..8e035ae
--- /dev/null
+++ b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/utility_resource_service_countries_security_filter.lua
@@ -0,0 +1,23 @@
+package.path = package.path .. ";/opt/nevisproxy/webapp/WEB-INF/lib/lua/Utils.lua"
+local Utils = require "Utils"
+
+function inputHeader(req, resp)
+  local trace = req:getTracer()
+
+  local queryParams = Utils.getQueryParameters(req)
+  local path = req:getRequestPath()
+  local pathInfo = req:getPathInfo()
+
+  -- only allow calls to the countries service
+  if path == nil then
+    trace:error("path is nil")
+  else
+    trace:error("path is " .. path)
+  end 
+  if pathInfo == nil then
+    trace:error("pathInfo is nil")
+  else
+    trace:error("path is " .. pathInfo)
+  end 
+
+end
\ No newline at end of file
diff --git a/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/web.xml b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/web.xml
index 1ba000a..6838a0b 100644
--- a/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/web.xml
+++ b/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/web.xml
@@ -640,6 +640,21 @@
             <param-value>outputHeader</param-value>
         </init-param>
     </filter>
+    <!-- source: pattern://3a982aa242ff4f8ebd823693 -->
+    <filter>
+        <filter-name>Lua_Utility_Resource_Service_Countries_Security_Filter</filter-name>
+        <filter-class>ch::nevis::isiweb4::filter::lua::LuaFilter</filter-class>
+        <!-- source: pattern://3a982aa242ff4f8ebd823693 -->
+        <init-param>
+            <param-name>Script.InputHeaderFunctionName</param-name>
+            <param-value>inputHeader</param-value>
+        </init-param>
+        <!-- source: pattern://3a982aa242ff4f8ebd823693 -->
+        <init-param>
+            <param-name>Script.Path</param-name>
+            <param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/utility_resource_service_countries_security_filter.lua</param-value>
+        </init-param>
+    </filter>
     <!-- source: pattern://cdbb957d49fdc6695a978265 -->
     <filter>
         <filter-name>ModSecurity_App_Icon_Application</filter-name>
@@ -1098,6 +1113,11 @@
         <filter-name>CSRF_Default</filter-name>
         <url-pattern>/AUTH/RECOVERY</url-pattern>
     </filter-mapping>
+    <!-- source: pattern://3a982aa242ff4f8ebd823693 -->
+    <filter-mapping>
+        <filter-name>Lua_Utility_Resource_Service_Countries_Security_Filter</filter-name>
+        <url-pattern>/resource/utility/*</url-pattern>
+    </filter-mapping>
     <!-- source: pattern://eaa622e2a760704c1e0e22f2 -->
     <filter-mapping>
         <filter-name>JSON_Utility_Resource_Service</filter-name>