Hacker News new | ask | show | jobs
by thayne 203 days ago
Also cases where a GET makes more sense, but there is concern about sensitive data in query parameters getting exposed in logs, so POST is used instead.
1 comments

You can always configure your HTTP logger to not log query parameters.
From a security perspective it is best to assume everything in a GET query is public, it's not always your server logs that you have to worry about, it could also be logs on the clients system (as an example).