3 ms·
My proposal doesn't break anything. If site authors change things users will probably react against the sites. Currently browsing with cookies disabled works fi
by dullgiulio 9y ago
My proposal doesn't break anything. If site authors change things users will probably react against the sites. Currently browsing with cookies disabled works fine almost everywhere.
Moreover, a browser can easily differentiate an AJAX POST from a user submitting a form.
- tokenizerrr 9y agoExcept that most webapps are entirely javascript based and thus AJAX nowadays. But I guess we're just conveniently ignoring this? And I'm not talking about changing anything. On most of my websites if you do a POST without having a session id (which gets assigned on first pageload, a GET), then you are a bot and your POST will be blocked. Byebye. There are many such schemes out there.