Trace must not be allowed

The HTTP Trace method must not be allowed to prevent Cross-Site Tracing (XST).

Given

HTTP TRACE request on any URL.

Expected

Expected Status Code: 405 (Method not allowed)

More information

See also:

• Test HTTP Methods (OWASP)
• Cross-Site Tracing (OWASP)