One security testing on my web.py application says,
HTTP Trace Support Detected
I know this allowing this will lead to cross-site tracing. But how can I disable this HTTP TRACE in my web.py app?
One security testing on my web.py application says,
HTTP Trace Support Detected
I know this allowing this will lead to cross-site tracing. But how can I disable this HTTP TRACE in my web.py app?
web.py doesn't support TRACE natively. Best to check your security tester. You can verify using something like
curl -X TRACEon your website: