httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matthew Tice <mjt...@gmail.com>
Subject [users@httpd] Re: Disallow CONNECT method
Date Thu, 21 May 2009 20:28:51 GMT
On Thu, May 21, 2009 at 10:18 AM, Matthew Tice <mjtice@gmail.com> wrote:

> I can't seem to disallow the CONNECT method.  Not matter what I try I keep
> getting a 502 error.  Here's the output of my installation:
>

We ended up moving our rewrite rule INTO the virtualhost directive:

RewriteEngine on
RewriteCond %{REQUEST_METHOD} !^(GET|POST|HEAD)$
RewriteRule .* - [F]

I'm not sure why it was allowed in the first place - but that's restricting
it now.

Matt

Mime
View raw message