Salut,
under the http-listener, just add:
<property name="traceEnabled" value="false'/>
A+
-- Jeanfrancois
Josh Daynard wrote:
> Hello,
>
> I'm sure this has been asked and answered before, but I can't find
> anything in our internal mailfinder so I apologize in advance.
>
> I'm at a customer who is deploying glassfish and their security folks
> have alerted on the fact that the HTTP TRACE method is enabled. How
> would I go about disabling this method, or is there a good reason that I
> can provide for it not being a security risk?
>
> Thanks,
> Josh
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>