title: How to disable http methods in embedded tomcat
body: <p>How to disable OPTIONS and TRACE http methods at <a href="http://localhost:9092" rel="nofollow noreferrer">http://localhost:9092</a> level in embedded tomcat?
  I used ZAP Security tool for testing and my request is--</p>
  
  <pre><code>OPTIONS http://localhost:9092 HTTP/1.1
  Proxy-Connection: keep-alive
  Upgrade-Insecure-Requests: 1
  User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
  Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
  Accept-Language: en-gb
  Content-Length: 0
  Host: localhost:9092
  </code></pre>
  
  <p>here i am getting response-</p>
  
  <pre><code>HTTP/1.1 404
  Cache-Control: no-cache, no-store, max-age=0, must-revalidate
  Pragma: no-cache
  Expires: 0
  X-XSS-Protection: 1; mode=block
  X-Frame-Options: SAMEORIGIN
  X-Content-Type-Options: nosniff
  Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
  </code></pre>
  
  <p>I want to disable Allow line from response</p>
  
  <p>Thanks In Advance</p>