Still more 3.0 features are required to support, also some old features might need to be considered in the OSGI environment, open this JIRA to track all of them.
a. Support ServletContext.ORDERED_LIBS attribute
b. Figure out how to support getRealPath in OSGI environment
c. Support security configurations while starting the webmodule via listeners
d. Support ServletContainerInitializer
e. Specification 13.4.1 p125
The @ServletSecurity annotation is not applied to the url-patterns of a ServletRegistration created using the addServlet(String, Servlet) method of the ServletContext interface, unless the Servlet was constructed by the createServlet method of the ServletContext interface.