Github user kdombeck commented on the issue:
https://github.com/apache/tomcat/pull/96
I haven't had any responses in
[thread](http://tomcat.10.x6.nabble.com/Change-HTTP-status-code-for-DefaultServlet-with-readOnly-set-to-true-td5070373.html)
I started for this issue.
I have updated this PR to return a 405 rather than a 403. With this 405
response an Allow header will also be returned.
I also updated HttpServlet.doOptions() to use a StringBuilder like you
asked. I modeled it after this
[HttpServlet.doOptions()](https://github.com/javaee/servlet-spec/blob/master/src/main/java/javax/servlet/http/HttpServlet.java#L522)
---
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
