【安全扫描问题】在Web服务器上禁用OPTIONS方法

1、修改web.xml 中的引入

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xmlns="http://java.sun.com/xml/ns/j2ee" 
xmlns:web="http://java.sun.com/xml/ns/j2ee" 
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" 
version="2.5">

2、增加配置代码，把需要过滤掉的添加到过滤代码中

<!-- 过滤掉DELETE、HEAD、PUT等请求方式 -->
  <security-constraint>
  	<web-resource-collection>
  		<url-pattern>/*</url-pattern>
  			<http-method>PUT</http-method>
  			<http-method>DELETE</http-method>
  			<http-method>HEAD</http-method>
  			<http-method>OPTIONS</http-method>
  			<http-method>TRACE</http-method>
  			<http-method>PATCH</http-method>
	</web-resource-collection>  
	<auth-constraint></auth-constraint>  
</security-constraint>  
<login-config>  
  <auth-method>BASIC</auth-method>  
</login-config>

重新启动tomcat完事