Questions tagged [http-trace]

TRACE is a HTTP verb. Use this tags for questions about related security issues, such as Cross Site Tracing.

Filter by
Sorted by
Tagged with
1 vote
1 answer

Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?

SCENARIO: I'm testing a web application. To test if TRACE is enabled I used both nmap --script http-methods and curl -k -i -X OPTIONS After running the former I get 443/tcp ...
Maicake's user avatar
  • 567
0 votes
1 answer

Is Using SSL secure enough to post request login credentials to my backend server?

I hope everyone is doing okay. I've built a React.js website which is hosted in a server with SSL, but I'm not sure whether it's secure or not. That's why I decided to ask you for some advice/tips or ...
atahanksy's user avatar
3 votes
2 answers

Is it still possible to use HTTP TRACE for XSS in modern Web Browsers?

Let's assume we are talking about top 10 most used web browsers: Usage share of web browsers 'TRACE' is a HTTP request method used for ...
Awaaaaarghhh's user avatar