4 ms·
What kind of API design is this? Post data should be sent within the request's body over HTTPS. Not as a url query.
by yashafromrussia 10y ago
What kind of API design is this? Post data should be sent within the request's body over HTTPS. Not as a url query.
- continuational 10y agoThe URL is encrypted too, so what's the difference in terms of security?
- mrcarrot 10y agoNowhere in the article does it say that the POST data was in the URL. As I understood it, he was editing the request body before the request was sent to PayPal's server.
- ComodoHacker 10y agoDoes it matter in this case?