How to disable TRACE method from the router configuration level

[jghunt]

This article applies to the On Premises Development Kit (OPDK) and these steps has been tested with OPDK version 4.14.07.00 and 4.15.01.00.

In the /opt/apigee4/conf/apigee/router/router.properties set the following on each of your routers, follow by a restart of your routers for the new configuration to take effect.

# Http methods that are allowed by the router, remove TRACE from this line
HTTPServer.methods.allowed=OPTIONS, GET, HEAD, POST, PUT, DELETE, PATCH 
# Turn the router validations on/off  
# Flag will enable/disable request validations in the router  
# request validations include allowed methods based on the value of property HTTPServer.methods.allowed and  
# the methods allowed by the proxy endpoint definition. Any method which is available in the severs allowed list  
# and not disabled by the proxy endpoint will be allowed to pass through  
# other validations are request versions allowed by the proxy endpoint.
HTTPServer.enable.validations=true 

[#2]

@Janice Hunt

if we dont set HTTPServer.enable.validations=true will trace still be allowed?