Disable HTTP TRACE method by default on https --------------------------------------------- Key: WFLY-4610 URL: https://issues.jboss.org/browse/WFLY-4610 Project: WildFly Issue Type: Bug Components: Web (Undertow) Reporter: Dan Hooper Assignee: Stuart Douglas A vulnerability scan tool found that the HTTP TRACE method is enabled on our wildfly server. I could not find any information about disabling TRACE on wildfly. Previous versions of JBOSS had disabled TRACE by default. The problem seems to only exist when using HTTPS. I have linked to a stack overflow post about this topic. http://stackoverflow.com/questions/28568730/how-to-disable-trace-track-ht...