All POST, PUT, DELETE and PATCH commands should be prevented regardless of whether they define a request body.