-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Sachin,
On 2/22/13 12:50 AM, Sachin wrote: > It does access a JSP page. But even I was expecting to stop TRACE > by specifically adding allowTrace="false". And as I've checked, > tomcat 5 is giving me this behavior properly but not 7.0.22. Can you repeat your tests with a URL that hits a non-JSP servlet? - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEAREIAAYFAlEnasEACgkQ9CaO5/Lv0PCvIQCgm/cDEQinRzA1Sc+bBCtv9ZVs caQAn07fybDnKjgscZE0tk98VeY52AxK =Oz8b -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org