Options

Drop or Reject the HTTP TRACE method

PhillipBPhillipB Member ✭
in aFleX
Recent Customer asked for a way to drop or reject the HTTP TRACE method for PCI compliance.

Thanks to JonD here is a quick aFleX to do that.

when HTTP_REQUEST {
if { [HTTP::method] eq "TRACE"} {
reject
}
}
Tagged:
Sign In or Register to comment.