3

How can I disable TRACE http method in Jetty? I'm using Jetty version 8. I want to disable it cause it is a security issue.

Mikhail Golubtsov
  • 6,285
  • 3
  • 29
  • 36
  • Possible duplicate of [Java embedded jetty is accepting HTTP TRACE method](https://stackoverflow.com/questions/29348328/java-embedded-jetty-is-accepting-http-trace-method) – eis Feb 15 '18 at 19:15

1 Answers1

4

I've investigated that TRACE is disabled by default so there is no issue.

Mikhail Golubtsov
  • 6,285
  • 3
  • 29
  • 36
  • 3
    I don't think this is true for embedded Jetty. – Christopher May 22 '15 at 19:14
  • 3
    This is only true for non-embedded Jetty. Embedded deployments of Jetty will need to disable TRACE with a security handler or doing something else. See this question: http://stackoverflow.com/questions/29348328/java-embedded-jetty-is-accepting-http-trace-method – Christopher May 26 '15 at 18:19