From ae45cecfcd2b9291d34ed1897b50b192018b517d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lo=C3=AFc=20Hoguin?= Date: Thu, 11 Apr 2013 21:25:35 +0200 Subject: Don't accept TRACE or CONNECT methods by default in REST For the simple reason that the REST code does nothing about them. --- src/cowboy_rest.erl | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/cowboy_rest.erl b/src/cowboy_rest.erl index b11a29a..526f102 100644 --- a/src/cowboy_rest.erl +++ b/src/cowboy_rest.erl @@ -96,9 +96,8 @@ known_methods(Req, State=#state{method=Method}) -> case call(Req, State, known_methods) of no_call when Method =:= <<"HEAD">>; Method =:= <<"GET">>; Method =:= <<"POST">>; Method =:= <<"PUT">>; - Method =:= <<"DELETE">>; Method =:= <<"TRACE">>; - Method =:= <<"CONNECT">>; Method =:= <<"OPTIONS">>; - Method =:= <<"PATCH">> -> + Method =:= <<"PATCH">>; Method =:= <<"DELETE">>; + Method =:= <<"OPTIONS">> -> next(Req, State, fun uri_too_long/2); no_call -> next(Req, State, 501); -- cgit v1.2.3