How To Prevent Http Options From Being Displayed During A PCI Test
(Doc ID 785764.1)
Last updated on NOVEMBER 04, 2016
Applies to:Oracle HTTP Server - Version: 10.1.2.0.2 to 10.1.3.4.0 - Release: AS10gR2 to AS10gR3
Information in this document applies to any platform.
telnet servername.oracle.com 7777
Connected to servername.oracle.com (184.108.40.206.4).
Escape character is '^]'. ======> Now type in the following words
OPTIONS / HTTP/1.0
HTTP/1.1 200 OK
Date: Thu, 12 Feb 2009 23:11:19 GMT
Server: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server
Allow: GET, HEAD, OPTIONS, TRACE =====> These options are displayed which fails PCI test
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!