I am getting this error when I start Tomcat:

SEVERE - For security constraints with URL pattern [/*] the HTTP methods [POST GET] are uncovered.

What is the reason of this?

I think this is a different problem from this: Severe security constraints while tomcat 8 startup with liferay.

My web.xml looks like:

    Restrict resources
    
        /resources dir
        /resources/*
    
    



    
        Whitelist
        /*
        GET
        POST
    
    

So I try to forbid all methods except GET and POST (see ). However, some methods (PUT, DELETE, OPTIONS...) seem to return a "302 Found" instead of an automatic 403, not sure why (missing request parameters?).