In the header, within the first 1024 bytes of the document.
See WHATWG - Charset
DELETE/PATCH/PUT are not valid values for the method attribute in the HTML5 standard. They were in fact removed from HTML4
Frameworks have a built-in work around, using for example a hidden input:
<input name="_method" type="hidden" value="pacth"/>