On 07/21/2011 02:28 PM, Aaron Freeman wrote: > On 7/21/2011 4:12 PM, Scott Ferguson wrote: >> On 07/21/2011 02:01 PM, Aaron Freeman wrote: >>> On 7/21/2011 12:27 PM, Scott Ferguson wrote: >>>> On 07/20/2011 10:39 AM, Aaron Freeman wrote: >>>>> I'd like to disabled the HTTP CONNECT method. I don't know the best >>>>> way to do that, but I tried this and it's not working: >>>>> >>>>> <resin:Forbidden regexp='.*'> >>>>> <resin:IfMethod value="CONNECT"/> >>>>> </resin:Forbidden> >>>>> >>>>> The request is passed on and I receive a 200 OK response when I telnet >>>>> and test the CONNECT. > Ah now I get your question. :) I was confused. > > I tried in the web-app-default and web-app based on the regex, but I am > guessing you are going to tell me that's too late and I need to put it > at the<host> level -- so I just tried that and it's working great. > Sorry for being slow and not thinking this one through more.
Hmm. The web-app and web-app-default should also work (I just checked with web-app-default), unless there's an earlier <resin:Dispatch> (or <resin:XXX>) that matches. -- Scott > Thanks, > > Aaron > > > > _______________________________________________ > resin-interest mailing list > email@example.com > http://maillist.caucho.com/mailman/listinfo/resin-interest > _______________________________________________ resin-interest mailing list firstname.lastname@example.org http://maillist.caucho.com/mailman/listinfo/resin-interest