Hi!
In chpater 12 've doubt reg <http-method> element.
in pg 634 its given that:
if a <web-resouce-collection> element contains no <http-method> elements then the collection includes the use of all Http methods on all of the URl
patterns. i.e they r not constrained.
in pg 635 2nd box last para points
1) DOn't specify any <http-method> elements in the <security-constraint>, which means that all methods are constrained.
which one is ocrrect?
It would be helpful if someone cousl explain this.
Thank you