I got a little further. After adding the ServletContextHandler.SECURITY flag context.getSecurityHandler does return a proper value. But after adding the constraint I still get these warnings for all my contexts:

WARN:oejs.SecurityHandler:main: ServletContext@n.i.u.s.ServletContext$1@5474c6c{/,null,STARTING} has uncovered http methods for path: /

On 05/18/2015 09:54 PM, Joakim Erdfelt wrote:
See answer for disabling TRACE in jetty embedded at

http://stackoverflow.com/questions/29348328/java-embedded-jetty-is-accepting-http-trace-method

Note that Jan's answer is the correct one.

--
Joakim Erdfelt <joa...@webtide.com <mailto:joa...@webtide.com>>
webtide.com <http://www.webtide.com/> - eclipse.org/jetty <http://eclipse.org/jetty/> - cometd.org <http://cometd.org/>
Expert advice, services and support from from the Jetty & CometD experts

On Sun, May 17, 2015 at 2:46 PM, Silvio Bierman <sbier...@jambo-software.com <mailto:sbier...@jambo-software.com>> wrote:

    Yes, I thought of that but imagined there might be some built-in
    way of doing this that might be more efficient.

    If that is not the case I guess that is the best way. Thank you
    very much.

    Cheers,

    Silvio



    On 05/17/2015 03:37 PM, Christoph Läubrich wrote:

        WHat about using a simple filter that responds with 403 on TRACE?

        Am 16.05.2015 01:33, schrieb Silvio Bierman:

            Hello all,

            I am using an embedded Jetty 9.2 server. I want to disable
            the HTTP Trace method but the only info on this I could
            find is related to a WebApplication which I do not use. I
            basically use

            Server
            ContextHandlerCollection
            ServletContextHandler
            ServletHolder
            ServerConnector

            Can anyone tell me how I can disable HTTP Trace using this
            setup?

            Cheers,

            Silvio
            _______________________________________________
            jetty-users mailing list
            jetty-users@eclipse.org <mailto:jetty-users@eclipse.org>
            To change your delivery options, retrieve your password,
            or unsubscribe from this list, visit
            https://dev.eclipse.org/mailman/listinfo/jetty-users


        _______________________________________________
        jetty-users mailing list
        jetty-users@eclipse.org <mailto:jetty-users@eclipse.org>
        To change your delivery options, retrieve your password, or
        unsubscribe from this list, visit
        https://dev.eclipse.org/mailman/listinfo/jetty-users


    _______________________________________________
    jetty-users mailing list
    jetty-users@eclipse.org <mailto:jetty-users@eclipse.org>
    To change your delivery options, retrieve your password, or
    unsubscribe from this list, visit
    https://dev.eclipse.org/mailman/listinfo/jetty-users




_______________________________________________
jetty-users mailing list
jetty-users@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

_______________________________________________
jetty-users mailing list
jetty-users@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to