How to disable HTTP Methods on cowboy server

Question

i need help on how to disable HTTP methods on my cowboy server.

Tried to search on the internet but eneded up with no solutions

Me too! OPTIONS is being flagged as a vuln. Can't find out how to disable it — Brian White
– Brian White, Commented May 7, 2020 at 20:04

Joseph Sible-Reinstate Monica · Accepted Answer · 2020-05-14 05:40:01Z

1

The documentation for method gives this example:

init(Req, State) ->
    case lists:member(cowboy_req:method(Req), [<<"GET">>, <<"POST">>]) of
        true -> handle(Req, State);
        false -> method_not_allowed(Req, State)
    end.

You can easily adapt that to be a blacklist instead of a whitelist. For example, to ban OPTIONS and TRACE, you'd do this:

init(Req, State) ->
    case lists:member(cowboy_req:method(Req), [<<"OPTIONS">>, <<"TRACE">>]) of
        false -> handle(Req, State);
        true -> method_not_allowed(Req, State)
    end.

answered May 14, 2020 at 5:40

Joseph Sible-Reinstate Monica

49k7 gold badges55 silver badges118 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Brian White Over a year ago

Awesome. Now I just have no idea if RabbitMQ exposes anything related in their use of it.

Collectives™ on Stack Overflow

How to disable HTTP Methods on cowboy server

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related