How to disable HEAD Method in .htaccess

Question

How to disable HEAD Method using .htaccess ?

I'm looking for a solution such that the GET/POST and other such donot get affected by this .htaccess command.

I've already disabled Trace using httpd config and have gone through various answers on stackoverflow but none of them are precise to my requirement.

@Phiter:Thanks but I'm specifically looking to dis-allow Head Method. — Nalin Raturi, Feb 09 '18 at 12:23

score 1 · Answer 1 · answered Feb 09 '18 at 10:57

1

This allows GET and POST and disable HTTP/1.0. It also disables proxy requests:

    RewriteEngine on
    RewriteCond %{THE_REQUEST} !^(POST|GET)\ /.*\ HTTP/1\.1$ 
    RewriteRule .* - [F]

answered Feb 09 '18 at 10:57

J_P

1

Your solution allows only GET & POST but what about other methods such as PUT,DELETE,TRACE,OPTIONS. My intention is to dis-allow only HEAD Method and not affecting other Methods. – Nalin Raturi Feb 09 '18 at 12:25
This blocks all requests except POST and GET… which is not what OP is asking for. Besides, RewriteCond put a bit more load on the server compared to a simple “Limit” rule. – e-sushi Dec 04 '19 at 05:55

score 0 · Answer 2 · answered Dec 04 '19 at 05:51

0

To exclusively block HEAD requests via .htaccess, you can simply “Limit” them like this:

    <Limit HEAD>
    Order Deny,Allow
    Deny from All
    </Limit>

answered Dec 04 '19 at 05:51

e-sushi

Limit directive docs: https://httpd.apache.org/docs/current/mod/core.html#limit – Design.Garden Jun 07 '22 at 17:55

2 Answers2