atom feed5 messages in net.java.dev.glassfish.usersRE: TRACE/TRACK vulnerability
FromSent OnAttachments
Lund, HollyMar 24, 2008 6:45 am 
Jeanfrancois ArcandMar 25, 2008 9:24 am 
Lund, HollyMar 26, 2008 5:43 am 
Lund, HollyMay 27, 2008 6:16 am 
Jan....@Sun.COMMay 27, 2008 4:38 pm 
Subject:RE: TRACE/TRACK vulnerability
From:Lund, Holly (holl@hq.doe.gov)
Date:Mar 26, 2008 5:43:07 am
List:net.java.dev.glassfish.users

thanks

Holly Lund 301-903-1174 202-586-4431

-----Original Message----- From: Jean@Sun.COM [mailto:Jean@Sun.COM] Sent: Tuesday, March 25, 2008 12:25 PM To: use@glassfish.dev.java.net Subject: Re: TRACE/TRACK vulnerability

Hi,

Lund, Holly wrote:

How do you secure this vulnerability?

do you want to disable trace? If yes, just add, in domain.xml under

<http-service...> .... <property name="traceEnabled" value="false"/> </http-service>

Thanks