How to avoid arbitrary HTTP verbs in webservices

[former_member744639]

Hello experts,

Created a webservice of a RFC function, however, upon testing we found that the webservice is accepting the arbitrary HTTP verbs e.g. RANDOM .

Webservices are supposed to give response on GET, PUT, DELETE like such verbs only.

Any idea, how can this be avoided using ECC 6 on HANA DB EHP 7.

Thanks in advance for help !

[former_member34]

Thank you for visiting SAP Community to get answers to your questions. Since this is your first question, I recommend that you familiarize yourself with our Q&A Tutorial: https://developers.sap.com/tutorials/community-qa.html, as it provides tips for preparing questions that draw responses from our members. Should you wish, you can revise your question by selecting Actions, then Edit.

By adding a picture to your profile you encourage readers to respond: https://www.youtube.com/watch?v=46bt1juWUUM

Many thanks!

[cris_hansen]

Hi Vicky,

You should use the ICM modification handler to only accept the HTTP methods you want (e.g. GET, POST). You can follow this SAP Help page to accomplish this.

Regards,

Cris