[GitHub] [pulsar] leizhiyuan opened a new issue, #18091: [Bug] Disable HTTP TRACE Method in webservice

[GitBox <gi...@apache.org>]

leizhiyuan opened a new issue, #18091:
URL: https://github.com/apache/pulsar/issues/18091

   ### Search before asking
   
   - [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.
   
   
   ### Version
   
   master
   
   ### Minimal reproduce step
   
   Pulsar uses embedded jetty which allows TRACE method by default. This is a widely-known security concern. Please disable HTTP TRACE method.
   
   ### What did you expect to see?
   
   https://issues.apache.org/jira/browse/ZOOKEEPER-3731
   
   ### What did you see instead?
   
   https://issues.apache.org/jira/browse/ZOOKEEPER-3731
   
   ### Anything else?
   
   https://github.com/apache/zookeeper/commit/44de549657a539dcedba58d56e67b8c906c89580
   
   ### Are you willing to submit a PR?
   
   - [X] I'm willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] github-actions[bot] commented on issue #18091: [Bug] Disable HTTP TRACE Method in webservice

[GitBox <gi...@apache.org>]

github-actions[bot] commented on issue #18091:
URL: https://github.com/apache/pulsar/issues/18091#issuecomment-1319458677

   The issue had no activity for 30 days, mark with Stale label.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org