This question already has an answer here:
- How to exploit HTTP Methods 2 answers
If I really need to use these methods, how do i make sure they are secure?
Edit: Is there a link or source where I can see how to make sure that 'PUT' and 'DELETE' methods are not able to delete or update resource, but services and servlets are still able to use PUT and DELETE.
Following services are using PUT and DELETE HTTP methods
So, clearly there has to be a way of making sure that PUT and DELETE can be used without putting resource files to harm like HTML, CSS, JS, or images.