golang http disable TRACE method

Question

Is there something like the traceEnable parameter in apache, in golang net/http?

I do have something like the following, but I do want to listen to GET, POST and HEAD, however not to the TRACE method

go func() {
        logger.Log(
            "level", 1,
            "action", "start https",
            "addr", opts.httpsAddr,
        )

        s := &http.Server{
            Addr:    opts.httpsAddr,
            Handler: server,
            TLSConfig: &tls.Config{
                MinVersion: tls.VersionTLS12,
            },
        }
        http2.ConfigureServer(s, nil)

        fatal("failed to start HTTPS: %s", s.ListenAndServeTLS(opts.tlsCrt, opts.tlsKey))
    }()

Basically I'd like to return a 405 on such a request

curl -v -X TRACE https://<server>

Volker · Accepted Answer · 2022-07-27 14:25:14Z

1

Is there something like the traceEnable parameter in apache, in golang net/http?

No.

You have to do that in your handler or middleware.

answered Jul 27, 2022 at 14:25

Volker

42.6k8 gold badges86 silver badges97 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

golang http disable TRACE method

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related