EN
Español
English
Português
    Access-Control-Allow-Methods header: insecure configuration

    CHG-47886-19-301378

    Changing the “Access-Control-Allow-Methods” header is required as it allows insecure methods (PUT and DELETE) on the website. This header specifies the HTTP methods allowed in the website interaction

    Adjust the PUT and DELETE methods so that they are not available on the home page of the ADM console.