Register / Login
this forum made possible by our volunteer staff, including ...
Stephan van Hulst
Disable the HTTP TRACE,DELETE methods in Web Sphere
posted 8 years ago
I want to Disable the HTTP TRACE method in web Sphere application server 6.1, but not getting how to do so.
All the results from search engine points to configuration which is possible on IBM HTTP Server but can not be done on WAS 6.1 it would great if anyone knowing the solution can help urgently
Disabling http transport tracing only disables the logs in trace file which is different, we are looking to disable http trace method as described in following reference link
I tried adding following in web.xml file. it works in
, but not in websphere.
<security-constraint> <web-resource-collection> <web-resource-name>Forbidden</web-resource-name> <url-pattern>/*</url-pattern> <http-method>PUT</http-method> <http-method>DELETE</http-method> <http-method>TRACE</http-method> <http-method>OPTIONS</http-method> </web-resource-collection> <auth-constraint> <role-name>empty_role</role-name> </auth-constraint> </security-constraint>
It is sorta covered in the
JavaRanch Style Guide
Boost this thread!
problem with security constraints
Keep having to login with container based authentaction.
Help in Adding two security constraint in web.xml
Neat Way of Writing my web.xml
Basic Authentication through websphere server