[jira] [Resolved] (AMQ-6182) disable TRACE method in apache activeMQ Server

["Christopher L. Shannon (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMQ-6182?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Christopher L. Shannon resolved AMQ-6182.
-----------------------------------------
    Resolution: Fixed

I have changed the default to turn TRACE off and this change will be included in 5.13.2 and 5.14.0.  To turn the HTTP trace method back on the websocket http port, you can append "http.enableTrace=true" on the connection URI in the broker configuration for the websocket port.

Example to turn trace back on:

{{ws://127.0.0.1:61623?http.enableTrace=true}}

> disable TRACE method in apache activeMQ Server
> ----------------------------------------------
>
>                 Key: AMQ-6182
>                 URL: https://issues.apache.org/jira/browse/AMQ-6182
>             Project: ActiveMQ
>          Issue Type: Task
>    Affects Versions: 5.11.1, 5.13.0
>         Environment: linux operating system
>            Reporter: Vidya Sagar D
>            Assignee: Christopher L. Shannon
>            Priority: Critical
>              Labels: activemq, activemq-web-console,, jetty
>             Fix For: 5.14.0, 5.13.2
>
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> For security reasons, have to disable TRACE method in Apache ActiveMQ Server, unable to do it.
> Could you please help me to disable TRACE method in Apache ActiveMQ server ( Jetty 7.x - Internal Server)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)