How to disable the JVB returning 200 to TRACE requests?

When I sent a HTTP TRACE request to the JVB (5390), it returns 200 OK.
How can I disable the Jetty accepting TRACE requests?
I’d like to do it for security reasons.

As far as I understand a TraceFilter is implemented after this issue:

But after a while this code was deleted in this merge:

So what is the best way to prevent the JVB accepting TRACE requests?
Do I need to configure the nginx? Is it the only way?

Anyone has a solution?

I guess this problem should be solved at nginx level, which is probably the reason behind removing TraceFilter from the code repository, right?