Is it possible to disable the HTTP OPTIONS a TRACE methods for Service Desk
Release : 17.X
Component : SERVICE DESK MANAGER
The OPTIONS method cannot be disabled as it is used by the Service Desk while loading attachments to the application, the TRACE method can be disabled, so you can follow the steps described bellow:
1) Please make a backup copy of web.xml ( it is under nxroot\bopcfg\www\CATALINA_BASE\webapps\CAisd\WEB-INF folder out side of the SD installation folder
2) Edit the web.xml via notepad++ , add the following lines:
<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>TRACE</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>
3) Restart the SD service.