Disable HTTP methods TRACE and/or TRACK for AEM Cloud Service.

[Swapnil_S]

The HTTP methods TRACE and/or TRACK are enabled in the AEM Cloud similar to the GET, PUT and POST  HTTP methods.

Trace and track are for server debugging and I want to avoid any exposure to the internet.

Any inputs on disabling HTTP methods TRACE and/or Track for AEM cloud service would be appreciated. Thanks all!

[Jörg_Hoh · Accepted solution]

You can explicitly disable it in your dispatcher configuration (see https://httpd.apache.org/docs/2.4/mod/core.html#limit)