3 ms·
The web server sends a response code with each response. The best, and most accurate, way of determining if the resource you requested is meant to be accessibl
by shkkmo 9y ago
The web server sends a response code with each response.
The best, and most accurate, way of determining if the resource you requested is meant to be accessible, is to check to see if you got a 200 OK response or a 403 Forbidden response.
- rayiner 9y agoGiven the numerous articles about documents inadvertently being exposed through URL ID incrementing, clearly response codes do not accurately convey what people meant.
- shkkmo 9y agoI didn't say it was perfectly accurate, just that it was the best. So your argument is that a better way to check this is to crawl the entire web looking for links to a resource to determine if it was meant to be publicly accessible?
- rootlocus 9y ago> Given the numerous articles about documents inadvertently being exposed through URL ID incrementing, clearly response codes do not accurately convey what people meant. Your intent argument is really shallow. People do bad things with good intentions all the time. Doesn't mean their actions are good or legal.