OWASPASVS 5.0 requirement
ASVS-V13.4.4 Using the http trace method is not supported in production environments, to avoid potential information leakage.
- Standard
- OWASP ASVS 5.0
- Chapter
- V13 Configuration
- Section
- V13.4 Unintended Information Leakage
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that using the HTTP TRACE method is not supported in production environments, to avoid potential information leakage.