Clarify docs for mod_allowmethods: you still

need to use TraceEnable to forbid TRACE.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1151149 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/docs/manual/mod/mod_allowmethods.xml b/docs/manual/mod/mod_allowmethods.xml
index 77b15b23cb8cd99b8b0f5ac64fef9034e693c67d..c19046d050b9f1669442cc1fe96008a05053645d 100644 (file)
--- a/docs/manual/mod/mod_allowmethods.xml
+++ b/docs/manual/mod/mod_allowmethods.xml
@@ -75,6 +75,11 @@ turn off <module>mod_allowmethods</module> in a deeper nested context:</p>
 &lt;/Location&gt;
 </example>
 
+<note><title>Caution</title>
+  <p>The TRACE method can not be denied by this module,
+  use <directive module="core">TraceEnable</directive> instead.</p>
+</note>
+
 <p><module>mod_allowmethods</module> was written to replace the rather
 kludgy implementation of <directive module="core">Limit</directive> and
 <directive module="core">LimitExcept</directive>.</p>