code: private boolean isDenyUncoveredHttpMethods(List<SecurityConstraint> scList) {
          for (SecurityConstraint sc : scList) {
              List<WebResourceCollection> wrcList = sc.getWebResourceCollections();
              for (WebResourceCollection wrc : wrcList) {
                  if (wrc.getDenyUncoveredHttpMethods()) {
                      return true;
                  }
              }
          }
          return false;
      }
docs: Returns whether deny-uncovered-http-methods attribute is set.
  In order to check this value, entire WebResourceCollection objects need to be examined,
  since it only set properly when web.xml is processed.
  
  @param scList the List of SecurityConstraint objects.
  @return true if deny-uncovered-http-methods attribute is set, false otherwise.