You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2022/08/01 16:43:15 UTC
[tomcat] branch 9.0.x updated: Update docs for TRACE changes
This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 896c506530 Update docs for TRACE changes
896c506530 is described below
commit 896c506530bb4c1a3331cdce40df334461b11545
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon Aug 1 17:42:52 2022 +0100
Update docs for TRACE changes
---
webapps/docs/config/ajp.xml | 6 +++++-
webapps/docs/config/http.xml | 6 +++++-
2 files changed, 10 insertions(+), 2 deletions(-)
diff --git a/webapps/docs/config/ajp.xml b/webapps/docs/config/ajp.xml
index be5cd0fc9c..121d1de101 100644
--- a/webapps/docs/config/ajp.xml
+++ b/webapps/docs/config/ajp.xml
@@ -83,7 +83,11 @@
<attribute name="allowTrace" required="false">
<p>A boolean value which can be used to enable or disable the TRACE
- HTTP method. If not specified, this attribute is set to false.</p>
+ HTTP method. If not specified, this attribute is set to false. As per RFC
+ 7231 section 4.3.8, cookie and www-authenticate headers will be excluded
+ from the response to the TRACE request. If you wish to include these, you
+ can implement the <code>doTrace()</code> method for the target Servlet and
+ gain full control over the reponse.</p>
</attribute>
<attribute name="asyncTimeout" required="false">
diff --git a/webapps/docs/config/http.xml b/webapps/docs/config/http.xml
index 2942b8a245..d12f22639a 100644
--- a/webapps/docs/config/http.xml
+++ b/webapps/docs/config/http.xml
@@ -79,7 +79,11 @@
<attribute name="allowTrace" required="false">
<p>A boolean value which can be used to enable or disable the TRACE
- HTTP method. If not specified, this attribute is set to false.</p>
+ HTTP method. If not specified, this attribute is set to false. As per RFC
+ 7231 section 4.3.8, cookie and www-authenticate headers will be excluded
+ from the response to the TRACE request. If you wish to include these, you
+ can implement the <code>doTrace()</code> method for the target Servlet and
+ gain full control over the reponse.</p>
</attribute>
<attribute name="asyncTimeout" required="false">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org