diff --git a/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java b/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java
index e533edbdb0..9fcbae62a2 100644
--- a/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java
+++ b/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java
@@ -61,7 +61,7 @@ import org.springframework.web.context.support.WebApplicationContextUtils;
 public abstract class AbstractAuthorizeTag {
     private String access;
     private String url;
-    private String method;
+    private String method = "GET";
     private String ifAllGranted;
     private String ifAnyGranted;
     private String ifNotGranted;
diff --git a/taglibs/src/main/resources/META-INF/security.tld b/taglibs/src/main/resources/META-INF/security.tld
index ce94181785..cb3e33fc16 100644
--- a/taglibs/src/main/resources/META-INF/security.tld
+++ b/taglibs/src/main/resources/META-INF/security.tld
@@ -42,8 +42,9 @@
 
         <attribute>
             <description>
-                Can optionally be used to narrow down the HTTP method (typically GET or POST) to which the URL
-                applies to. Only has any meaning when used in combination with the "url" attribute.
+                Can be used to narrow down the HTTP method (typically GET or POST) to which the URL
+                applies. Only has any meaning when used in combination with the "url" attribute. This method will
+                be used when looking up the security metadata for the URL. Defaults to GET.
             </description>
             <name>method</name>
             <required>false</required>