启用不安全HTTP方法

启用不安全HTTP方法

Java代码

1. 修改web工程中或者服务器web.xml,增加安全配置信息，禁用不必要HTTP方法
2. <security-constraint>
3. <web-resource-collection>
4. <url-pattern>/*</url-pattern>
5. <http-method>PUT</http-method>
6. <http-method>DELETE</http-method>
7. <http-method>HEAD</http-method>
8. <http-method>OPTIONS</http-method>
9. <http-method>TRACE</http-method>
10. </web-resource-collection>
11. <auth-constraint>
12. </auth-constraint>
13. </security-constraint>
14. <login-config>
15. <auth-method>BASIC</auth-method>
16. </login-config>

修改web工程中或者服务器web.xml,增加安全配置信息，禁用不必要HTTP方法

  <security-constraint>  

   <web-resource-collection>  

      <url-pattern>/*</url-pattern>  

      <http-method>PUT</http-method>  

      <http-method>DELETE</http-method>  

      <http-method>HEAD</http-method>  

      <http-method>OPTIONS</http-method>  

      <http-method>TRACE</http-method>  

   </web-resource-collection>  

   <auth-constraint>  

   </auth-constraint>  

 </security-constraint>  

 <login-config>  

   <auth-method>BASIC</auth-method>  

 </login-config>