How to disable the HTTP OPTIONS a TRACE methods for Service Desk

Products

• CA Service Desk Manager

Issue/Introduction

Is it  possible to disable the HTTP OPTIONS a TRACE methods for Service Desk

Environment

Release : 17.1 or higher

Component : SERVICE DESK MANAGER

Resolution

The OPTIONS method cannot be disabled as it is used by the Service Desk while loading attachments to the application, the TRACE method can be disabled, so you can follow the steps decribed bellow:


1) Please make a backup copy of web.xml ( it is under nxroot\bopcfg\www\CATALINA_BASE\webapps\CAisd\WEB-INF folder out side of the SD installation folder
2) Edit the web.xml via notepad++ , add the following lines: 



<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>TRACE</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>



3) Restart the SD service.