Java embedded jetty is accepting HTTP TRACE method
I'm trying to disable HTTP TRACE method in embedded Jetty. In Jetty doc's is info that HTTP trace is disabled by default, but for embedded it is still enabled. I was trying to disable trace as a security constraint as is done in jetty.xml. ServletContextHandler servletHandler = new ServletContextHandler(ServletContextHandler.SESSIONS | ServletContextHandler.SECURITY); servletHandler.setClassLoader(Server.class.getClassLoader()); servletHandler.setContextPath("/"); servletHandler.addEventListener(new ContextLoaderListener()); servletHandler.addServlet(new ServletHolder(new CXFServlet()), "/*");