Disable http methods


#1

Is there a way to disable the http options method on nexus 2 OSS? I have tried many methods as described for tomcat using both a blacklist and a whitelist and nothing seems to disable the OPTIONS method in the WEB-INF/web.xml file.

Blacklist method:

<security-constraint>
  <web-resource-collection>
    <web-resource-name>restricted methods</web-resource-name>
    <url-pattern>/*</url-pattern>
    <http-method>OPTIONS</http-method>
  </web-resource-collection>
  <auth-constraint/>
</security-constraint>

Whitelist method:

<security-constraint>
  <web-resource-collection>
    <web-resource-name>restricted methods</web-resource-name>
    <url-pattern>/*</url-pattern>
    <http-method-omission>GET</http-method-omission>
    <http-method-omission>HEAD</http-method-omission>
    <http-method-omission>POST</http-method-omission>
  </web-resource-collection>
  <auth-constraint/>
</security-constraint>