HTTP TRACE·메서드 제한 Apache·web.xml

Apache

TraceEnable Off

<Directory />
    <LimitExcept GET POST>
        Order allow,deny
        deny from all
    </LimitExcept>
</Directory>

앱 web.xml

<security-constraint>
  <web-resource-collection>
    <web-resource-name>Protected Context</web-resource-name>
    <url-pattern>/*</url-pattern>
    <http-method>PUT</http-method>
    <http-method>DELETE</http-method>
    <http-method>TRACE</http-method>
    <http-method>COPY</http-method>
    <http-method>MOVE</http-method>
    <http-method>OPTIONS</http-method>
  </web-resource-collection>
  <auth-constraint>
    <role-name></role-name>
  </auth-constraint>
</security-constraint>