4 ms·

Lots of web apps are still implemented along the lines of: GET /foo?action=delete&item=x A less naive implementation would also include a crumb to mitigate CSR

by iguana 13y ago

Lots of web apps are still implemented along the lines of: GET /foo?action=delete&item=x A less naive implementation would also include a crumb to mitigate CSRF as well as unintentional access.

vidarh 13y ago
Yes, and you regularly see notes about how [some bot] has caused some developer to learn why this is bad practice whenever a link like that gets accidentally exposed in a way that allows crawling.
wolf550e 13y ago
popular web browsers prefetch links.