On 07/20/2011 10:39 AM, Aaron Freeman wrote: > I'd like to disabled the HTTP CONNECT method. I don't know the best > way to do that, but I tried this and it's not working: > > <resin:Forbidden regexp='.*'> > <resin:IfMethod value="CONNECT"/> > </resin:Forbidden> > > The request is passed on and I receive a 200 OK response when I telnet > and test the CONNECT. > > What is the most efficient way to get Resin to deny those requests?
That config works for me. (You don't need the regexp if you're matching everything, but it doesn't matter for this issue.) There is the <resin:Forbidden> tag? -- Scott > Thanks, > > Aaron > > > _______________________________________________ > resin-interest mailing list > [email protected] > http://maillist.caucho.com/mailman/listinfo/resin-interest > _______________________________________________ resin-interest mailing list [email protected] http://maillist.caucho.com/mailman/listinfo/resin-interest
