Forum Discussion

ee's avatar
ee
Icon for Cirrus rankCirrus
Oct 01, 2024

Why does WAF block HTTP OPTION method

Does the HTTP Option method pose significant security risk to the web application? 
HttpMethod
options
Aswin_mk's avatar
Aswin_mk
Icon for MVP rankMVP
Oct 03, 2024

Hello ee 

 

As per my understanding,

 

If you do not expect requests to contain HTTP data following the HTTP header section, select act as GET.

If you expect requests to contain HTTP data following the HTTP header section, select act as POST.

 

Hope you understand the same.

 

Br

Aswin