HTTP options Method

Hi there,

Does anybody knows how do i disable HTTP options method in cloudflare.

Any assistance is greatly appreciated.

Best Regards
JY Tan

Which HTTP options are you looking at?

Hi sdayman,

The issue was raised because it was possible to edit and send a HTTP OPTIONS request to the cloudflare server, and the server responds to this request with a HTTP 200 and returns the methods allowed in an “Allow: GET, HEAD” header.

Best Regards
JY Tan

Try a firewall rule. It looks like you can block any request with a Method that equals OPTION.

This topic was automatically closed after 30 days. New replies are no longer allowed.