4 ms·
Also cases where a GET makes more sense, but there is concern about sensitive data in query parameters getting exposed in logs, so POST is used instead.
by thayne 11mo ago
Also cases where a GET makes more sense, but there is concern about sensitive data in query parameters getting exposed in logs, so POST is used instead.
- venturecruelty 11mo agoYou can always configure your HTTP logger to not log query parameters.
- ghxst 11mo agoFrom a security perspective it is best to assume everything in a GET query is public, it's not always your server logs that you have to worry about, it could also be logs on the clients system (as an example).