Currently is not possible to specify `disallowed-methods` option in the CXF HTTP Undertow Transport. The workaround is to use an CXF handler that wrap the Undertow handler that implements the option, similar to CxfRequestLimitingHandler configured like:
 

        <httpu:engine port="the_port">
            <httpu:handlers>
                <bean class="org.apache.cxf.transport.http_undertow.handlers.CxfRequestLimitingHandler"/>
            </httpu:handlers>
         </httpu:engine>