security Developer Legacy

Allowing POST and GET methods is not enough

Question

A customer had changed the configuration and allowed methods are POST and GET. After this change, no language can be added to a web project.

Answer

To add language (for JCR actions) the method PUT is used. So they have to allow this method. Or they can add the language with a script to the web project.