2017. 10. 30.

[웹 취약점] 톰캣 취약한 메소드 차단하기

# 작업 대상 파일
/tomcat/conf/web.xml

# 상세 내용
<security-constraint>
  <web-resource-collection>
    <web-resource-name>Protected Context</web-resource-name>
    <url-pattern> /* </url-pattern>
    <http-method>PUT</http-method>
    <http-method>DELETE</http-method>
    <http-method>HEAD</http-method>
    <http-method>TRACE</http-method>
    <http-method>OPTIONS</http-method>
  </web-resource-collection>
  <auth-constraint/>
</security-constraint>

Popular Posts

Recent Posts

Powered by Blogger.