TRACE is a HTTP verb. Use this tags for questions about related security issues, such as Cross Site Tracing.
Questions tagged [http-trace]
3 questions
2
votes
1 answer
Is it still possible to use HTTP TRACE for XSS in modern Web Browsers?
Let's assume we are talking about top 10 most used web browsers: Usage share of web browsers
https://www.cgisecurity.com/questions/httptrace.shtml
'TRACE' is a HTTP request method used for debugging which echo's back
input back to the user.…
Awaaaaarghhh
- 562
- 2
- 18
1
vote
1 answer
Why if a server response contain both Public: TRACE and Allow: TRACE then responds with 405 NOT allowed?
SCENARIO:
I'm testing a web application. To test if TRACE is enabled I used both
nmap --script http-methods target.com
and
curl -k -i -X OPTIONS target.com
After running the former I get
443/tcp open https
| http-methods:
| Supported Methods:…
Maicake
- 497
- 1
- 3
- 13
0
votes
1 answer
Is Using SSL secure enough to post request login credentials to my backend server?
I hope everyone is doing okay.
I've built a React.js website which is hosted in a server with SSL, but I'm not sure whether it's secure or not. That's why I decided to ask you for some advice/tips or solutions that will make my website secure.
In…
atahanksy
- 3
- 2