On 07/21/2011 02:28 PM, Aaron Freeman wrote:
> On 7/21/2011 4:12 PM, Scott Ferguson wrote:
>> On 07/21/2011 02:01 PM, Aaron Freeman wrote:
>>> On 7/21/2011 12:27 PM, Scott Ferguson wrote:
>>>> On 07/20/2011 10:39 AM, Aaron Freeman wrote:
>>>>> I'd like to disabled the HTTP CONNECT method.   I don't know the best
>>>>> way to do that, but I tried this and it's not working:
>>>>>
>>>>> <resin:Forbidden regexp='.*'>
>>>>> <resin:IfMethod value="CONNECT"/>
>>>>> </resin:Forbidden>
>>>>>
>>>>> The request is passed on and I receive a 200 OK response when I telnet
>>>>> and test the CONNECT.
> Ah now I get your question.  :)  I was confused.
>
> I tried in the web-app-default and web-app based on the regex, but I am
> guessing you are going to tell me that's too late and I need to put it
> at the<host>  level -- so I just tried that and it's working great.
> Sorry for being slow and not thinking this one through more.

Hmm.

The web-app and web-app-default should also work (I just checked with 
web-app-default), unless there's an earlier <resin:Dispatch> (or 
<resin:XXX>) that matches.

-- Scott

> Thanks,
>
> Aaron
>
>
>
> _______________________________________________
> resin-interest mailing list
> resin-interest@caucho.com
> http://maillist.caucho.com/mailman/listinfo/resin-interest
>



_______________________________________________
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest

Reply via email to