https://portswigger.net/kb/issues/00500a00_http-trace-method-is-enabled
HTTP TRACE method is enabled - PortSwigger
The HTTP TRACE method is designed for diagnostic purposes. If enabled, the web server will respond to requests that use the TRACE method by echoing in its...
http tracemethodenabledportswigger
https://www.fortra.com/resources/vulnerabilities/http-trace-method-xss-vulnerability
How to Find and Fix the HTTP TRACE Method XSS Vulnerability (CVE-2010-0386)
Servers supporting the HTTP TRACE method are subject to cross-site-scripting attacks when used in conjunction with various weaknesses in browsers.
how to find