Do not delegate TRACE to HttpServlet on ERROR dispatch #31457
Labels
in: web
Issues in web modules (web, webmvc, webflux, websocket)
type: enhancement
A general enhancement
Milestone
Based on spring-projects/spring-boot#33623.
Tomcat disables TRACE requests by default, which results in a 405. Spring Boot handles the resulting ERROR dispatch, and
FrameworkServlet
delegates to its parent fordoTrace
handling as usual. The result is in an error response with HTTP TRACE (instead of error) details in the body.The issue will be fixed at the Servlet level with jakartaee/servlet#545, possibly for Servlet 6.1, but meanwhile we can apply a temporary fix in
FrameworkServlet
.The text was updated successfully, but these errors were encountered: