7 ms·

Well, maybe not for much longer... Less facetiously: the Googlebot isn't making random POST requests, it's just executing Javascript on the page. So not only

Well, maybe not for much longer... Less facetiously: the Googlebot isn't making random POST requests, it's just executing Javascript on the page. So not only would you need an unprotected POST /comments/1234/delete endpoint, you'd also need to serve the UI and Javascript for POSTing to that endpoint to an unauthenticated user. I'm sure there are still people out there doing that, but at least it's more than a simple error of omission.

tptacek 15y ago
I agree that this Googlebot change is unlikely to be the end of the world.
- pork 15y ago
  It might be for wikis that allow anyone to delete content.
  - dpark 15y ago
    Do those wikis also have JS that attempts to delete content without user interaction?
  - eli 15y ago
    There have been evil spam bots executing JS and posting forms for some time. Those sites were already screwed.
WalterGR 15y ago
Well, maybe not for much longer... I wonder how much the Google Web Accelerator debacle made people realize that GET is supposed to be idempotent. Perhaps Googlebot will do the same for POST and authentication.