使用HyperServer后同样会出现“做安全扫描时发现有“启用了不安全的 HTTP 方法”的问题

By huayan889
November 19, 2020 in Chinese

https://forums.unigui.com/index.php?/topic/15572-%E4%BD%BF%E7%94%A8hyperserver%E5%90%8E%E5%90%8C%E6%A0%B7%E4%BC%9A%E5%87%BA%E7%8E%B0%E2%80%9C%E5%81%9A%E5%AE%89%E5%85%A8%E6%89%AB%E6%8F%8F%E6%97%B6%E5%8F%91%E7%8E%B0%E6%9C%89%E2%80%9C%E5%90%AF%E7%94%A8%E4%BA%86%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84-http-%E6%96%B9%E6%B3%95%E2%80%9D%E7%9A%84%E9%97%AE%E9%A2%98/

Followers 0

Recommended Posts

huayan889

Posted November 19, 2020

使用HyperServer后同样会出现“做安全扫描时发现有“启用了不安全的 HTTP 方法”的问题，官方能否可以参考这个方法修复一下？

procedure TUniServerModule.UniGUIServerModuleHTTPCommand(
  ARequestInfo: TIdHTTPRequestInfo; AResponseInfo: TIdHTTPResponseInfo;
  var Handled: Boolean);
begin
  if (ARequestInfo.CommandType =hcHEAD) or
   (ARequestInfo.CommandType =hcPUT) or
   (ARequestInfo.CommandType =hcTRACE) or
   (ARequestInfo.CommandType =hcOPTION) or
   (ARequestInfo.CommandType =hcDELETE) then
  begin
      Handled := false;
      AResponseInfo.ResponseNo:=405;
      AResponseInfo.CloseConnection:=true;
  end;
end;