Drop or Reject the HTTP TRACE method

Product Discussions aFleX
1

Recent Customer asked for a way to drop or reject the HTTP TRACE method for PCI compliance.

Thanks to JonD here is a quick aFleX to do that.

when HTTP\_REQUEST \{
 if \{ [HTTP::method] eq "TRACE"\} \{

reject

 \}
\}