Thank you for verifying that ! It helps a lot I know the TRACE and OPTIONS
may be a different story - Trace at least can be disabled. I greatly
appreciate your response!
On Fri, Aug 8, 2014 at 7:50 PM, Rob Silver wrote:
> Is it true that by default on a Apache Tomcat 7.025 server RESTFUL verbs
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Mark,
On 8/10/14, 4:44 AM, Mark Thomas wrote:
> On 09/08/2014 13:31, Christopher Schultz wrote:
>> Rob,
>>
>> On 8/8/14, 7:50 PM, Rob Silver wrote:
>>> Is it true that by default on a Apache Tomcat 7.025 server
>>> RESTFUL verbs are enabled as part
On 09/08/2014 13:31, Christopher Schultz wrote:
> Rob,
>
> On 8/8/14, 7:50 PM, Rob Silver wrote:
>> Is it true that by default on a Apache Tomcat 7.025 server RESTFUL
>> verbs are enabled as part of the HTTP protocol Tomcat uses?
>
> Tomcat does not filter HTTP verbs other than TRACE out of the b
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Rob,
On 8/8/14, 7:50 PM, Rob Silver wrote:
> Is it true that by default on a Apache Tomcat 7.025 server RESTFUL
> verbs are enabled as part of the HTTP protocol Tomcat uses?
Tomcat does not filter HTTP verbs other than TRACE out of the box. If
you
Is it true that by default on a Apache Tomcat 7.025 server RESTFUL verbs
are enabled
as part of the HTTP protocol Tomcat uses?
Anotherwards if I hade a restful web application - perhaps a spring mvc one
would it work out of the box as far as security constraints go?
I have not yet seen any way to c
