The HTTP OPTIONS method can be disabled by adding the block below to the Tomcat $JFROG_HOME/artifactory/app/artifactory/tomcat/conf/web.xml file:
After executing the above, restart the Artifactory service in order for the change to take effect.
<!-- ================ Disable HTTP OPTIONS ========================= --> <security-constraint> <web-resource-collection> <web-resource-name>restricted methods</web-resource-name> <url-pattern>/*</url-pattern> <http-method>OPTIONS</http-method> </web-resource-collection> <auth-constraint /> </security-constraint>
After executing the above, restart the Artifactory service in order for the change to take effect.