Turn off TRACE in GlassFish v2

Question

I need to turn off TRACE to help close XST security vulnerabilities. I've been looking, nothing obvious so far. Any help?

Answer 1

set enableTrace to false in http-service

Answer 2

"set enableTrace to false in http-service" matches Jeanfrancois Arcand's answer. JFA's answer has the 'syntax'. You will need to make the change in the domain.xml file. That file is in the config directory of your domain. The path to that file is (typically) GFINSTALL/domains/domain1/config/domain.xml