Questions tagged [http-trace]

17 questions
6
votes
1 answer

Spring boot 2x actuator http trace not tracing body

i have enabled management endpoints including httptrace using below given property. management.endpoints.web.exposure.include=* but using http://localhost:8081/actuator/httptrace request body parameter not coming in response { "traces": [ { …
user4477122
4
votes
2 answers

How can I disable HTTP TRACE in embedded untertow of a Spring boot application

My goal is to DISABLE HTTP TRACE method for my spring boot application, which is using embedded undertow. A working yaml change will be preferred, if not, code changes are fine too. The end result should ideally be 4xx HTTP response code and no…
4
votes
3 answers

Spring Boot: enable HTTP TRACE method for embedded Tomcat

Standalone Tomcat allows you to enable TRACE HTTP method through allowTrace attribute: allowTrace - A boolean value which can be used to enable or disable the TRACE HTTP method. If not specified, this attribute is set to false. If I have to do…
samshers
  • 1
  • 6
  • 37
  • 84
2
votes
1 answer

How to import actuator httptrace in actuator prometheus? (actuator, spring boot, grafana)

Imagine this is my http://localhost:8080/actuator ouotput: { "_links": { "self": { "href": "http://localhost:8080/actuator", "templated": false }, "health": { "href": "http://localhost:8080/actuator/health", …
2
votes
3 answers

How to disable TRACE/TRACK HTTP in JBoss Wildfly?

I want to disable TRACE/TRACK HTTP methods in JBoss wildfly 8.1 at server level and not in web.xml. How do do it?
user3728450
  • 109
  • 2
  • 6
1
vote
1 answer

Spring Boot: getting query string parameters and request body in AuditApplicationEvent listener

Spring Boot REST app here. I'm trying to configure Spring Boot request auditing to log each and every HTTP request that any resources/controllers receive with the following info: I need to see in the logs the exact HTTP URL (path) that was…
hotmeatballsoup
  • 385
  • 6
  • 58
  • 136
1
vote
1 answer

How can I disable the HTTP TRACE method in Laravel Forge?

I have an application that needs to pass a security review. I'm using Laravel Forge and the item in question is: The application web server must be configured to disable the TRACE and other HTTP methods if not being used. I tested it using curl…
Citizen
  • 12,430
  • 26
  • 76
  • 117
0
votes
1 answer

In SBA UI I cannot find the WEB menu or HttpTrace menu how to enable it

I have created a spring boot 3 admin server and connected applications as clients but in the UI I cannot find the WEB menu or HttpTrace menu how to enable it I have given "*" in endpoint enable property so all menus should be available but Web or…
0
votes
0 answers

How to execute custom code when any outgoing HTTP request is initiated in .Net 4.5 console application

I have a c# console application running on .Net 4.5 framework. It has many outgoing HTTP POST and GET calls to various servers. Now I want to log the outgoing requests in my database with some custom code. The project is already live so I do not…
Yash
  • 356
  • 1
  • 5
  • 22
0
votes
1 answer

How to implement the response to the TRACE request in express.js?

The HTTP TRACE method performs a message loop-back test along the path to the target resource, providing a useful debugging mechanism. The final recipient of the request should reflect the message received back to the client as the message body of a…
0
votes
0 answers

Troubleshooting 404 errors form a specific IP only on Websphere

I have an application deployed on two Websphere instances. I can access both instances without any problems from any browser or curl/wget. However, when requests come through the load balancer a very strange behavior takes place. Log…
Patriot
  • 314
  • 3
  • 17
0
votes
1 answer

How can I log the Content-Type that Spring rejects with a 415 Unknown Media Type?

I've got a basic Spring Boot app with a REST endpoint that is configured to receive POSTs with Content-Type = application/json. My external partner is posting me HTTP requests, but apparently with a different Content-Type, because my app rejects…
Florian
  • 4,821
  • 2
  • 19
  • 44
0
votes
1 answer

How to trace traffic to GCP kubernetes Services

How to trace traffic of GCP kubernetes service? I would like to see who access the service and volume of traffic.
Nipu
  • 653
  • 1
  • 8
  • 15
0
votes
1 answer

HTTP TRACE / TRACK Methods Enabled vulnerability in Coldfusion server

I keep getting HTTP TRACE / TRACK Methods Enabled vulnerability in Coldfusion server. Any suggestions to fix this would be of great help.
Anita
  • 3
  • 1
0
votes
1 answer

Disable web.py HTTP TRACE

One security testing on my web.py application says, HTTP Trace Support Detected I know this allowing this will lead to cross-site tracing. But how can I disable this HTTP TRACE in my web.py app?
Marlon Abeykoon
  • 11,927
  • 4
  • 54
  • 75
1
2