Disable HTTP methods TRACE and/or TRACK for AEM Cloud Service. | Community
Skip to main content
S
Swapnil_S
March 31, 2022
Solved

Disable HTTP methods TRACE and/or TRACK for AEM Cloud Service.

  • March 31, 2022
  • 1 reply
  • 1908 views

The HTTP methods TRACE and/or TRACK are enabled in the AEM Cloud similar to the GET, PUT and POST  HTTP methods.

 

Trace and track are for server debugging and I want to avoid any exposure to the internet.

 

Any inputs on disabling HTTP methods TRACE and/or Track for AEM cloud service would be appreciated. Thanks all!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

You can explicitly disable it in your dispatcher configuration (see https://httpd.apache.org/docs/2.4/mod/core.html#limit)

1 reply

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
April 3, 2022

You can explicitly disable it in your dispatcher configuration (see https://httpd.apache.org/docs/2.4/mod/core.html#limit)

    K
    kailasnadhu90
    July 7, 2022

    Getting below error:
    Apache configuration uses non-allowlisted directives:
      conf.d/available_vhosts/XYZ.vhost:47: <Limit>

      joerghoh
      Adobe Employee
      joerghohAdobe Employee
      Adobe Employee
      July 13, 2022

      IIRC the use of this configuration statement should be flagged by the dispatcher validation tool. In case it is, please raise a support ticket to ask if this statement could be allowed.

        Terms & ConditionsAccessibility statement

        Loading footer...