Add a note about WebDAV

apache · Jan 20, 2025 · 4d5dd49 · 4d5dd49
1 parent f7bb7f0
commit 4d5dd49
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/webapps/docs/security-howto.xml b/webapps/docs/security-howto.xml
@@ -543,6 +543,10 @@
     headers it sets unless your application is already setting them. If Tomcat
     is accessed via a reverse proxy, then the configuration of this filter needs
     to be co-ordinated with any headers that the reverse proxy sets.</p>
+
+    <p>The WebDAV servlet enables edit functionality for web application
+    content. If the WebDAV servlet is enabled, the WebDAV functionality should
+    be appropriately secured.</p>
   </section>
 
   <section name="Embedded Tomcat">