Three Minutes with the HTTP TRACE Method

This blog post demonstrates that HTTP TRACE responses can expose intermediary-added headers (e.g., X-Forwarded-For), allowing an attacker to spoof those headers and potentially bypass WAF filtering; it explains why Cross-Site Tracing is largely mitigated in modern browsers via CORS and provides an HTML/XHR proof-of-concept to illustrate the technique.