How to disable trace in HTTP methods to improve security awareness

Using nikto to test the server, we found that the TRACE method was enabled for HTTP.
Trace and track are the HTTP methods used to debug web server connections.
The server that supports this method has a cross-site scripting vulnerability. When describing various browser defects, the cross-site-tracing vulnerability is referred to as XST.
Attackers can exploit this vulnerability to fool legitimate users and obtain their personal information.

Solution: disable these methods.
In the configuration file HTTP. conf, add traceenable off to disable it.