In our application(Deployed in IIS), we have enabled only HTTPS(Disabled HTTP access).
While accessing API endpoint using http protocol with OPTIONS verb, its returning 200 Ok response.
How to fix?
Asked
Active
Viewed 178 times
1
Nithyanantham Mylsamy
- 35
- 1
- 6
-
You can easily use URL Rewrite rule to block such requests. – Lex Li Aug 08 '22 at 18:05
1 Answers
0
You can try to disable the OPTIONS verb in IIS, the steps are as follows:
Start the IIS Manager, double-click to open the Request Filtering module, select HTTP Verbs, select Deny Verb… on the right, enter OPTIONS and click OK.
YurongDai
- 1,362
- 1
- 2
- 7