Skip to content

Trace must not be allowed

The HTTP Trace method must not be allowed to prevent Cross-Site Tracing (XST).

Given

  • HTTP TRACE request on any URL.

Expected

  • Expected Status Code: 405 (Method not allowed)

More information