How to disable HTTP OPTIONS Method in JBoss?
<p>I'm trying to disable JBOSS HTTP OPTIONS method. Using the following syntax in the web.xml in JBoss, I can disable all the http-method except OPTIONS. Is there a way to successfully disable http-method OPTIONS?</p>

<p><a href="https://i.stack.imgur.com/K1hbD.png" rel="nofollow noreferrer">click here for screenshot</a></p>

<pre><code>&lt;security-constraint&gt;  
&lt;web-resource-collection&gt;  
    &lt;web-resource-name&gt;Restricted&lt;/web-resource-name&gt;  
    &lt;description&gt;Declarative security tests&lt;/description&gt;  
    &lt;url-pattern&gt;/EVE/*&lt;/url-pattern&gt;       
    &lt;http-method&gt;PUT&lt;/http-method&gt;  
    &lt;http-method&gt;DELETE&lt;/http-method&gt;
    &lt;http-method&gt;OPTIONS&lt;/http-method&gt;
    &lt;http-method&gt;TRACE&lt;/http-method&gt;    
&lt;/web-resource-collection&gt;  
&lt;auth-constraint&gt;  
    &lt;description&gt;Only authenticated users can access secure content&lt;/description&gt;  
    &lt;role-name&gt;AuthorizedUser&lt;/role-name&gt;  
&lt;/auth-constraint&gt;  
&lt;user-data-constraint&gt;  
    &lt;description&gt;no description&lt;/description&gt;  
    &lt;transport-guarantee&gt;NONE&lt;/transport-guarantee&gt;  
&lt;/user-data-constraint&gt;  
&lt;/security-constraint&gt;  &lt;security-constraint&gt;  
&lt;web-resource-collection&gt;  
    &lt;web-resource-name&gt;Restricted 2&lt;/web-resource-name&gt;  
    &lt;description&gt;Declarative security tests&lt;/description&gt;  
    &lt;url-pattern&gt;/*&lt;/url-pattern&gt;        
    &lt;http-method&gt;PUT&lt;/http-method&gt;  
    &lt;http-method&gt;DELETE&lt;/http-method&gt; 
    &lt;http-method&gt;OPTIONS&lt;/http-method&gt;
    &lt;http-method&gt;TRACE&lt;/http-method&gt;  
&lt;/web-resource-collection&gt;  
&lt;auth-constraint&gt;  
    &lt;description&gt;Only authenticated users can access secure content&lt;/description&gt;  
    &lt;role-name&gt;AuthorizedUser&lt;/role-name&gt;  
&lt;/auth-constraint&gt;  
&lt;user-data-constraint&gt;  
    &lt;description&gt;no description&lt;/description&gt;  
    &lt;transport-guarantee&gt;NONE&lt;/transport-guarantee&gt;  
&lt;/user-data-constraint&gt;  
&lt;/security-constraint&gt;
</code></pre>