Disabilitato HTTP TRACE

2018-06-21 12:49:09 +02:00 · 2018-06-21 12:49:09 +02:00 · b8f83bb211
parent 1d1042d8fe
commit b8f83bb211
1 changed files with 4 additions and 0 deletions
--- a/.htaccess
+++ b/.htaccess
@ -58,6 +58,10 @@
    RewriteRule ^node_modules/ - [F,L]
    RewriteRule ^vendor/ - [F,L]

+    # Disable HTTP TRACE
+    RewriteCond %{REQUEST_METHOD} ^TRACE
+    RewriteRule .* - [F]
+
    # Prevent hacks
 	# proc/self/environ? no way!
 	RewriteCond %{QUERY_STRING} proc/self/environ [OR]