Questions tagged [http-trace]

14 questions
6
votes
1 answer

Spring boot 2x actuator http trace not tracing body

i have enabled management endpoints including httptrace using below given property. management.endpoints.web.exposure.include=* but using http://localhost:8081/actuator/httptrace request body parameter not coming in response { "traces": [ { …
user4477122
4
votes
1 answer

How can I disable HTTP TRACE in embedded untertow of a Spring boot application

My goal is to DISABLE HTTP TRACE method for my spring boot application, which is using embedded undertow. A working yaml change will be preferred, if not, code changes are fine too. The end result should ideally be 4xx HTTP response code and no…
3
votes
2 answers

Spring Boot: enable HTTP TRACE method for embedded Tomcat

Standalone Tomcat allows you to enable TRACE HTTP method through allowTrace attribute: allowTrace - A boolean value which can be used to enable or disable the TRACE HTTP method. If not specified, this attribute is set to false. If I have to do…
samshers
  • 1,269
  • 1
  • 18
  • 39
2
votes
3 answers

How to disable TRACE/TRACK HTTP in JBoss Wildfly?

I want to disable TRACE/TRACK HTTP methods in JBoss wildfly 8.1 at server level and not in web.xml. How do do it?
user3728450
  • 109
  • 2
  • 5
1
vote
0 answers

How to import actuator httptrace in actuator prometheus? (actuator, spring boot, grafana)

Imagine this is my http://localhost:8080/actuator ouotput: { "_links": { "self": { "href": "http://localhost:8080/actuator", "templated": false }, "health": { "href": "http://localhost:8080/actuator/health", …
scre_www
  • 2,014
  • 4
  • 17
  • 26
1
vote
1 answer

Spring Boot: getting query string parameters and request body in AuditApplicationEvent listener

Spring Boot REST app here. I'm trying to configure Spring Boot request auditing to log each and every HTTP request that any resources/controllers receive with the following info: I need to see in the logs the exact HTTP URL (path) that was…
hotmeatballsoup
  • 82
  • 1
  • 21
  • 53
1
vote
1 answer

How can I disable the HTTP TRACE method in Laravel Forge?

I have an application that needs to pass a security review. I'm using Laravel Forge and the item in question is: The application web server must be configured to disable the TRACE and other HTTP methods if not being used. I tested it using curl…
Citizen
  • 10,683
  • 20
  • 68
  • 105
0
votes
0 answers

Troubleshooting 404 errors form a specific IP only on Websphere

I have an application deployed on two Websphere instances. I can access both instances without any problems from any browser or curl/wget. However, when requests come through the load balancer a very strange behavior takes place. Log…
Patriot
  • 300
  • 3
  • 13
0
votes
0 answers

springboot How to redirect to error page when requesting trace method

I blocked the trace method in tomcat, so when I call api with trace method, it returns 405 (method not allow). But here is information about what method tomcat supports, so I want to respond with custom error page or custom error response that I…
kimGT
  • 1
0
votes
1 answer

How can I log the Content-Type that Spring rejects with a 415 Unknown Media Type?

I've got a basic Spring Boot app with a REST endpoint that is configured to receive POSTs with Content-Type = application/json. My external partner is posting me HTTP requests, but apparently with a different Content-Type, because my app rejects…
Florian
  • 4,372
  • 13
  • 34
0
votes
1 answer

How to trace traffic to GCP kubernetes Services

How to trace traffic of GCP kubernetes service? I would like to see who access the service and volume of traffic.
Nipu
  • 303
  • 4
  • 10
0
votes
1 answer

HTTP TRACE / TRACK Methods Enabled vulnerability in Coldfusion server

I keep getting HTTP TRACE / TRACK Methods Enabled vulnerability in Coldfusion server. Any suggestions to fix this would be of great help.
Anita
  • 3
  • 1
0
votes
1 answer

Disable web.py HTTP TRACE

One security testing on my web.py application says, HTTP Trace Support Detected I know this allowing this will lead to cross-site tracing. But how can I disable this HTTP TRACE in my web.py app?
Marlon Abeykoon
  • 9,221
  • 4
  • 41
  • 68
-1
votes
1 answer

How to prevent Fiddler/Firebug from showing my HTTP requests?

I do not want my traffic to be logged by Fiddler/Firebug or any such tool. How can I achieve this? Is HTTPS the only answer? I got this idea when I was googling something but my Firebug was on and it showed access denied. How can I achieve this…
Mohit Vaidh
  • 33
  • 1
  • 5