SAP Note 1422175 - How to disable the HTTP TRACE requests

Component : Web Container, HTTP, JavaMail, Servlets -

Solution : https://service.sap.com/sap/support/notes/1422175 (SAP Service marketplace login required)

Key words :
>  <url-pattern>/ </url-pattern>  <http-method>trace</http-method> </web-resource-collection> <auth-constraint>  <role-, <security-constraint> <web-resource-collection>  <web-resource-, /usr/sap/<sid>/<instance>/j2ee/configtool directory, cluster_data -> server -> persistent -> servlet_jsp -> global-web, > </auth-constraint></security-constraint>sap_block_trace_non_existent_role, org/protocols/rfc2616/rfc2616-sec9, terms http trace request, prerequisites http trace requests, >disableexploittracehttp</web-resource-, http trace requests

Related Notes :

1473116
870170Customization is lost after upgrade of the Engine