servlet
servlet copied to clipboard
As per RFC 9110 (and earlier) HTTP TRACE response MUST NOT include sensitive headers
https://www.rfc-editor.org/rfc/rfc9110.html#name-trace
The requirement was added in RFC 7231. It is not present in RFC 2616.