Questions tagged [http-trace]

TRACE is a HTTP verb. Use this tags for questions about related security issues, such as Cross Site Tracing.

Filter by
Sorted by
Tagged with
1 vote
1 answer
347 views

Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?

SCENARIO: I'm testing a web application. To test if TRACE is enabled I used both nmap --script http-methods target.com and curl -k -i -X OPTIONS target.com After running the former I get 443/tcp ...
Maicake's user avatar
  • 567
0 votes
1 answer
601 views

Is Using SSL secure enough to post request login credentials to my backend server?

I hope everyone is doing okay. I've built a React.js website which is hosted in a server with SSL, but I'm not sure whether it's secure or not. That's why I decided to ask you for some advice/tips or ...
atahanksy's user avatar
3 votes
2 answers
2k views

Is it still possible to use HTTP TRACE for XSS in modern Web Browsers?

Let's assume we are talking about top 10 most used web browsers: Usage share of web browsers https://www.cgisecurity.com/questions/httptrace.shtml 'TRACE' is a HTTP request method used for ...
Awaaaaarghhh's user avatar