Home Our Services IT Security Web Server

How to disable HTTP Options on Sun One Web Server?

To disable the HTTP Options on the Sun One Web server (V6/7) you need to edit the file

/{sunone_InstallDir}/httpacl/generated.https-{server_Name}.acl

Under the acl "default" line add the following:-

 

deny absolute (http_trace, http_put, http_delete, http_options) user="anyone";

This will deny TRACE, PUT, DELETE and OPTIONS on the Web Server.

 

Last Updated (Sunday, 01 November 2009 16:26)