Disable HTTP TRACE method in Tomcat
1. Edit $TOMCAT/conf/server.xml
2. Look for "connector" element
3. Add an attribute: allowTrace="false"
4. Restart Tomcat.
2. Look for "connector"
3. Add an attribute: allowTrace="false"
4. Restart Tomcat.