From: <glassfish_at_javadesktop.org>
Date: Mon, 23 Nov 2009 15:53:43 PST

I am using a web security analyzer tool: nikto.
When I scan GlassFish on my local box, it says HTTP TRACE is enabled.
When I add the property "traceEnabled" and set it to "false", nikto still reports that HTTP TRACE is enabled.
Is this the correct way to disable HTTP TRACE?
[Message sent by forum member 'bmw01281991' ]

http://forums.java.net/jive/thread.jspa?messageID=373057