Disable HTTP methods TRACE and/or TRACK for AEM Cloud Service.

3 replies
1911 views
Translate

The HTTP methods TRACE and/or TRACK are enabled in the AEM Cloud similar to the GET, PUT and POST HTTP methods.

Trace and track are for server debugging and I want to avoid any exposure to the internet.

Any inputs on disabling HTTP methods TRACE and/or Track for AEM cloud service would be appreciated. Thanks all!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

joerghohAccepted solution

Employee

You can explicitly disable it in your dispatcher configuration (see https://httpd.apache.org/docs/2.4/mod/core.html#limit)

joerghohAccepted solution

Employee

You can explicitly disable it in your dispatcher configuration (see https://httpd.apache.org/docs/2.4/mod/core.html#limit)

Translate

K

kailasnadhu90

New Participant

Getting below error:
Apache configuration uses non-allowlisted directives:
conf.d/available_vhosts/XYZ.vhost:47: <Limit>

Translate

joerghoh

Employee

IIRC the use of this configuration statement should be flagged by the dispatcher validation tool. In case it is, please raise a support ticket to ask if this statement could be allowed.

Translate

Sign up

Login with SSO

Login to the community

Login with SSO