openstack
/
fuel-library
Code Issues Proposed changes

Disable TRACE method for Apache 2.4 

Avoiding possible XST attack vector

Change-Id: I3f4d29c71811a3d6240cfa8b9242039c27a6cad7
Closes-Bug: #1533209
This commit is contained in:
Kyrylo Galanov 2016-01-18 17:30:48 +02:00
parent 7c0d1977ca
commit 479e228cb0
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
deployment/puppet/cobbler/templates/httpd_2.4.conf.erb
View File

@ -347,6 +347,9 @@ AddDefaultCharset UTF-8
#EnableMMAP off
EnableSendfile on
# Disable TRACE method
TraceEnable off
# Supplemental configuration
#
# Load config files in the "/etc/httpd/conf.d" directory, if any.