Thread

1. ks2048 · 1789866191 · focus · HN ↗

   So is “you can make GET requests, but not POST requests” an actual form of security people use?

   1. comeonbro · 1789866620 · focus · HN ↗

      Unrealistically-naive (...) forms of "sandboxing" might assume that restricting an agent to GET-requests-only will let it retrieve info from the outside world without being able to effect it.

      Also probably many actually-in-use "Web Fetch" tools are GET-only, though perhaps without counting on that bad assumption.

Unofficial Hacker News client; not affiliated with Y Combinator.