On Thu, May 21, 2009 at 10:18 AM, Matthew Tice <mjt...@gmail.com> wrote:
> I can't seem to disallow the CONNECT method. Not matter what I try I keep
> getting a 502 error. Here's the output of my installation:
>
We ended up moving our rewrite rule INTO the virtualhost directive:
RewriteEngine on
RewriteCond %{REQUEST_METHOD} !^(GET|POST|HEAD)$
RewriteRule .* - [F]
I'm not sure why it was allowed in the first place - but that's restricting
it now.
Matt
