Search code examples
securitytomcattomcat8

Disable TRACK http method from tomcat 8

How can I disable TRACE and TRACK HTTP methods from tomcat 8?

I have found a method to disable TRACE by adding allowTrace="false" to connector.

How can I disable the TRACK method?

Solution

  • I found that there are no HTTP method call TRACK. Please refer this link. So need only block TRACE method.