Hi, I need to disable TRACE to pass a security scan, so I added allowTrace="false" to all my connectors, but its still allowing TRACE!
I had to work around with urlrewrite and a jsp with 1 line which was response.sendError(response.SC_NOT_IMPLEMENTED , "NOT IMPLEMENTED"); However I would prefer the allowTrace="false" to work properly! Any ideas as to why its not working? Thanks, I. -- View this message in context: http://old.nabble.com/allowTrace%3D%22false%22-allowing-Trace-Method-tp27148410p27148410.html Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
