From 64cb4ea11550492adbdd36765bb196c078302ac6 Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Sun, 30 Nov 2008 14:10:09 +0000
Subject: disallow trace and track on vhosts -> security

---
 templates/vhosts/static/CentOS.erb | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'templates/vhosts/static/CentOS.erb')

diff --git a/templates/vhosts/static/CentOS.erb b/templates/vhosts/static/CentOS.erb
index 1019deb..6739e7b 100644
--- a/templates/vhosts/static/CentOS.erb
+++ b/templates/vhosts/static/CentOS.erb
@@ -21,4 +21,8 @@
     <%- unless additional_options == 'absent' then -%>
     <%= additional_options %>
     <%- end -%>
+
+    RewriteEngine on
+    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
+    RewriteRule .* - [F
 </VirtualHost>
-- 
cgit v1.2.3