3 ms·
Does anyone actually send links like that? Any competent programmer will make the link expire on an interaction, not on load - there are some many things that c
by franga2000 5y ago
Does anyone actually send links like that? Any competent programmer will make the link expire on an interaction, not on load - there are some many things that could cause a link to receive a GET request, but where the use wouldn't actually be able to interact with the page.
- fomine3 5y agoUsing GET for non-idempotent generally considered bad, but it seems that email is a place that non-idempotent GET is still used. I often see it on unsubscribe link.
- franga2000 5y agoYeah, fair enough, I do run into those occasionally too, but most of them these days make sure to require at least a confirmation click.
- DaiPlusPlus 5y ago> I often see it on unsubscribe link. Those are meant to load a page with a confirmation form that makes a POST request. The GET link can still expire over time, but must never be expired from a GET request: you never know when a link preview bot is going to follow links.