Turn off TRACE in GlassFish v2

I need to turn off TRACE to help close XST security vulnerabilities. I've been looking, nothing obvious so far. A开发者_StackOverflowny help?

"set enableTrace to false in http-service" matches Jeanfrancois Arcand's answer. JFA's answer has the 'syntax'. You will need to make the change in the domain.xml file. That file is in the config directory of your domain. The path to that file is (typically) GFINSTALL/domains/domain1/config/domain.xml

set enableTrace to false in http-service