Configuring HTTP methods

Consider restrictions and configurations concerning security for certain HTTP methods.

Restricting the use of HTTP methods
Using certain HTTP methods can reveal the internal server configuration to outsiders, which makes your web applications more vulnerable. To restrict or forbid insecure or verbose HTTP methods such as OPTIONS and TRACE, you must make changes in the web.xml file of your web application.
Overriding security restrictions of HTTP methods
When you use HTTP methods, consider the security aspects. For tighter security, some firewalls do not allow HTTP PUT or DELETE traffic.

Parent topic: Additional server configurations