-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Sachin,

On 2/22/13 12:50 AM, Sachin wrote:
> It does access a JSP page. But even I was expecting to stop TRACE
> by specifically adding allowTrace="false". And as I've checked,
> tomcat 5 is giving me this behavior properly but not 7.0.22.

Can you repeat your tests with a URL that hits a non-JSP servlet?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEAREIAAYFAlEnasEACgkQ9CaO5/Lv0PCvIQCgm/cDEQinRzA1Sc+bBCtv9ZVs
caQAn07fybDnKjgscZE0tk98VeY52AxK
=Oz8b
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to