When I sent a HTTP TRACE request to the JVB (5390), it returns 200 OK.
How can I disable the Jetty accepting TRACE requests?
I’d like to do it for security reasons.
As far as I understand a TraceFilter is implemented after this issue:
But after a while this code was deleted in this merge:
So what is the best way to prevent the JVB accepting TRACE requests?
Do I need to configure the nginx? Is it the only way?