title: How to disable HTTP OPTIONS Method in JBoss?
body: <p>I'm trying to disable JBOSS HTTP OPTIONS method. Using the following syntax in the web.xml in JBoss, I can disable all the http-method except OPTIONS. Is there a way to successfully disable http-method OPTIONS?</p>
  
  <p><a href="https://i.stack.imgur.com/K1hbD.png" rel="nofollow noreferrer">click here for screenshot</a></p>
  
  <pre><code>&lt;security-constraint&gt;  
  &lt;web-resource-collection&gt;  
      &lt;web-resource-name&gt;Restricted&lt;/web-resource-name&gt;  
      &lt;description&gt;Declarative security tests&lt;/description&gt;  
      &lt;url-pattern&gt;/EVE/*&lt;/url-pattern&gt;       
      &lt;http-method&gt;PUT&lt;/http-method&gt;  
      &lt;http-method&gt;DELETE&lt;/http-method&gt;
      &lt;http-method&gt;OPTIONS&lt;/http-method&gt;
      &lt;http-method&gt;TRACE&lt;/http-method&gt;    
  &lt;/web-resource-collection&gt;  
  &lt;auth-constraint&gt;  
      &lt;description&gt;Only authenticated users can access secure content&lt;/description&gt;  
      &lt;role-name&gt;AuthorizedUser&lt;/role-name&gt;  
  &lt;/auth-constraint&gt;  
  &lt;user-data-constraint&gt;  
      &lt;description&gt;no description&lt;/description&gt;  
      &lt;transport-guarantee&gt;NONE&lt;/transport-guarantee&gt;  
  &lt;/user-data-constraint&gt;  
  &lt;/security-constraint&gt;  &lt;security-constraint&gt;  
  &lt;web-resource-collection&gt;  
      &lt;web-resource-name&gt;Restricted 2&lt;/web-resource-name&gt;  
      &lt;description&gt;Declarative security tests&lt;/description&gt;  
      &lt;url-pattern&gt;/*&lt;/url-pattern&gt;        
      &lt;http-method&gt;PUT&lt;/http-method&gt;  
      &lt;http-method&gt;DELETE&lt;/http-method&gt; 
      &lt;http-method&gt;OPTIONS&lt;/http-method&gt;
      &lt;http-method&gt;TRACE&lt;/http-method&gt;  
  &lt;/web-resource-collection&gt;  
  &lt;auth-constraint&gt;  
      &lt;description&gt;Only authenticated users can access secure content&lt;/description&gt;  
      &lt;role-name&gt;AuthorizedUser&lt;/role-name&gt;  
  &lt;/auth-constraint&gt;  
  &lt;user-data-constraint&gt;  
      &lt;description&gt;no description&lt;/description&gt;  
      &lt;transport-guarantee&gt;NONE&lt;/transport-guarantee&gt;  
  &lt;/user-data-constraint&gt;  
  &lt;/security-constraint&gt;
  </code></pre>