1. Disable trace OFF in web server (httpd.conf) file
TraceEnable off
2. If the above does not work , here is a simple REDIRECT statement
RewriteEngine On RewriteCond %{REQUEST_METHOD} ^TRAC(E|K) RewriteRule .* - [F]
3. Do this in the application server if not
Simply edit $TOMCAT/conf/server.xml, and for theelement, add an attribute: allowTrace="false". Restart Tomcat and enjoy
No comments :