How to disable the HTTP OPTIONS a TRACE methods for Service Desk

Products

• CA Service Desk Manager

Issue/Introduction

Is it  possible to disable the HTTP OPTIONS a TRACE methods for Service Desk

Environment

Release : 17.X

Component : SERVICE DESK MANAGER

Resolution

The OPTIONS method cannot be disabled as it is used by the Service Desk while loading attachments to the application, the TRACE method can be disabled, so you can follow the steps described bellow:

1) Please make a backup copy of web.xml ( it is under nxroot\bopcfg\www\CATALINA_BASE\webapps\CAisd\WEB-INF folder out side of the SD installation folder

2) Edit the web.xml via notepad++ , add the following lines: 

 

<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>TRACE</http-method>
</web-resource-collection>
<auth-constraint />
</security-constraint>

 

3) Restart the SD service.