7 ms·
Should the use of GET (when client is sending data) be discontinued completely? It seems a number of exploits have used data in the URL query string as part of
by dpweb 12y ago
Should the use of GET (when client is sending data) be discontinued completely? It seems a number of exploits have used data in the URL query string as part of attacks. Some of Homakov's hijacks come to mind..
Also the fact a URL query string may be more likely to logged who knows where, at least more likely than a POST body.