Disabling HTTP Methods in Apache Tomcat

Solution Unverified - Updated -

Issue

  • How to disable HTTP methods in Apache Tomcat?
  • How to disallow HTTP methods in Apache Tomcat?
  • For security reasons we would like to disable certain HTTP methods (PUT, DELETE, TRACE and OPTIONS) in Tomcat. Is there a way to do this by using Tomcat configuration?
  • How to disable HTTP TRACE/OPTIONS method?

Environment

  • Red Hat Enterprise Linux (RHEL)
  • Red Hat JBoss Web Server (JWS)
  • Apache Tomcat

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In