- 综合排序
- 最热优先
- 最新优先
- 来自专栏开发杂记
springboot禁用内置Tomcat的不安全请求方法
security-constraint> <web-resource-collection> <url-pattern>/*</url-pattern> <http-method >PUT</http-method> <http-method>DELETE</http-method> <http-method>HEAD</http-method > <http-method>OPTIONS</http-method> <http-method>TRACE</http-method>
5.5K20发布于 2019-08-09 - 来自专栏AI粉嫩特攻队
关于WebDAV带来的网站潜在安全问题的疑问
web.xml中即可： <security-constraint> <web-resource-collection> <url-pattern>/*</url-pattern> <http-method >PUT</http-method> <http-method>DELETE</http-method> <http-method>HEAD</http-method> <http-method >OPTIONS</http-method> <http-method>TRACE</http-method> </web-resource-collection> <auth-constraint
2.8K20发布于 2019-09-10 - 来自专栏山山仙人的专栏
Tomcat调优(不定期更新)
security-constraint> <web-resource-collection> <url-pattern>/*</url-pattern> <http-method >PUT</http-method> <http-method>DELETE</http-method> <http-method>HEAD</http-method > <http-method>OPTIONS</http-method> <http-method>TRACE</http-method>
1.2K20发布于 2020-04-29 - 来自专栏A周立SpringCloud
Light Security 1.0.1发布
}方法请求的{path}路径必须具备什么{expression} spec-list: - http-method: ANY path: /login expression : "anon()" - http-method: ANY path: /user expression: "hasAnyRoles('user','admin')" - http-method: GET path: /error expression: "anon()" - http-method: ANY path: / light-security: # 权限规则配置：表示用{http-method}方法请求的{path}路径必须具备什么{expression} spec-list: - http-method : "hasAnyRoles('user','admin')" - http-method: GET path: /error expression: "anon()"
65320发布于 2019-05-13 - 来自专栏Java后端技术
史上最全web.xml配置文件元素详解
Area</web-resource-name> 5 <url-pattern>/jsp/security/protected/*</url-pattern> 6 <http-method >DELETE</http-method> 7 <http-method>GET</http-method> 8 <http-method>POST</http-method > 9 <http-method>PUT</http-method> 10 </web-resource-collection> 11 <auth-constraint
50420发布于 2018-08-09 - 来自专栏全栈程序员必看
网站10大常见安全漏洞及解决方案
security-constraint> <web-resource-collection> <url-pattern>/*</url-pattern> <http-method >PUT</http-method> <http-method>DELETE</http-method> <http-method>HEAD</http-method > <http-method>OPTIONS</http-method> <http-method>TRACE</http-method> </web-resource-collection
1K30编辑于 2022-07-08 - 来自专栏johnhuster
tomcat8部署solr6.4.2
<web-resource-name>Disable TRACE</web-resource-name> <url-pattern>/</url-pattern> <http-method >TRACE</http-method> </web-resource-collection> <auth-constraint/> </security-constraint>
34510编辑于 2022-03-28 - 来自专栏Java3y
过滤器监听器面试题都在这里
web-resource-name>ProtectedArea</web-resource-name> <url-pattern>/admin/*</url-pattern> <http-method >GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint
1K60发布于 2018-03-15 - 来自专栏大数据那些事
Apache（3）——配置文件里的各参数（1）
AllowOverride一般都是默认为None，不去使用.htaccess文件 Required是允许权限，all就是谁都可以访问，也可以设置仅允许某些请求方式来进行访问，语法为： Require method http-method [http-method] 也可以设置某些ip网段去访问
69010发布于 2020-11-11 - 来自专栏用户2442861的专栏
web.xml文件的作用及基本配置
web-resource-name> <url-pattern>/jsp/security/protected/*</url-pattern> <http-method >DELETE</http-method> <http-method>GET</http-method> <http-method>POST</http-method > <http-method>PUT</http-method> </web-resource-collection> <auth-constraint
1.8K20发布于 2018-09-19 - 来自专栏Lcry个人博客
RouterOS 使用CloudFlare动态更新 DDNS脚本
:put $WANip" file="ddns.tmp"; :log info ("CF: 开始更新解析记录, 设置 $CFDomain = $WANip") /tool fetch http-method = $WANip") :log info ("CF: 请求CFurl = $CFurl&content=$WANip") :log info ("CF: 执行命令 = \"/tool fetch http-method = $WANip) do={ :log info ("CF: 开始更新解析记录, 设置 $CFDomain = $WANip") /tool fetch http-method=put mode=https
11.2K30编辑于 2022-12-25 Tomcat深度架构解析与应用实践
web-resource-name>Secure Area</web-resource-name> <url-pattern>/secure/*</url-pattern> <http-method >GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint web-resource-name>Restricted methods</web-resource-name> <url-pattern>/*</url-pattern> <http-method >PUT</http-method> <http-method>DELETE</http-method> <http-method>HEAD</http-method> <http-method>OPTIONS</http-method> <http-method>TRACE</http-method> </web-resource-collection
63311编辑于 2025-09-04- 来自专栏开发杂记
web.xml详解
– 描 述了度可与URL模式指定的资源哪些方法是受约束的，如果没有<http-method>元素，表示任何角色的人都无法访问任何http的方 法 。这里放置了GET方法，表示只有GET方法是受约束的。 –> <http-method>GET</http-method> </web-resource-collection> <!
94440发布于 2019-08-09 - 来自专栏乐沙弥的世界
Apache httpd 2.4 访问控制
Require all denied 拒绝所有 Require env env-var [env-var] … 只有在给定的环境变量被设置的情况下才允许访问 Require method http-method [http-method] … 允许特定的HTTP方法（GET/POST/HEAD/OPTIONS） Require expr expression 允许特定表达式为true时 Require
2K20发布于 2018-08-06 - 来自专栏Khan安全团队
基于Python开发的NFuzz
-d Post data FUZZ need "FUZZ" word in data , data,usage:"username=admin&password=FUZZ" -X http-method
71210发布于 2020-03-20 - 来自专栏喵了个咪的博客空间
Solr搜索引擎 — 两种安装方式
<web-resource-name>Disable TRACE</web-resource-name> <url-pattern>/</url-pattern> <http-method >TRACE</http-method> </web-resource-collection> <auth-constraint/> </security-constraint>
94520发布于 2019-05-26 - 来自专栏建帅技术分享
python提取xml指定内容
--http-method>GET</http-method--> </web-resource-collection> <auth-constraint> <role-name <web-resource-name>Disable TRACE</web-resource-name> <url-pattern>/*</url-pattern> <http-method >TRACE</http-method> </web-resource-collection> <auth-constraint /> </security-constraint>
1.5K20编辑于 2022-08-24 - 来自专栏用户9703952的专栏
dirsearch使用方法
http-proxy=HTTPPROXY Http代理 (example: localhost:8080 --http-method
1.1K10编辑于 2024-02-19 - 来自专栏喵了个咪的博客空间
Solr搜索引擎 — SolrCloud安装和集群配置
<web-resource-name>Disable TRACE</web-resource-name> <url-pattern>/</url-pattern> <http-method >TRACE</http-method> </web-resource-collection> <auth-constraint/> </security-constraint>
87320编辑于 2022-11-28 - 来自专栏网络安全攻防
DirSeach目录扫描
,admin# suffixes = ~,.bak# wordlists = /path/to/wordlist1.txt,/path/to/wordlist2.txt[request]http-method
45810编辑于 2023-12-01
腾讯云开发者
Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有
深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 
粤公网安备44030502008569号
腾讯云计算（北京）有限责任公司 京ICP证150476号 | 京ICP备11018762号