Skip to content

Commit

Permalink
See #1895. Don't limit to query parameters. Mention intermediaries.
Browse files Browse the repository at this point in the history
  • Loading branch information
ioggstream authored and reschke committed Nov 13, 2024
1 parent 18bf6e1 commit acb6562
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions draft-ietf-httpbis-safe-method-w-body.xml
Original file line number Diff line number Diff line change
Expand Up @@ -484,10 +484,11 @@ Dubois, Camille, [email protected]
</t>

<t>
The QUERY method can be used as an alternative to passing query
information in the query portion of a URI. This is preferred in some
cases, as the URI is more likely to be logged than the request content. If
a server creates a temporary resource to represent the results of a QUERY
The QUERY method can be used as an alternative to passing request
information in the URI (e.g., in the query section). This is preferred in some
cases, as the URI is more likely to be logged or otherwise processed
by intermediaries than the request content.
If a server creates a temporary resource to represent the results of a QUERY
request (e.g., for use in the Location or Content-Location field) and the request
contains sensitive information that cannot be logged, then the URI of this
resource &SHOULD; be chosen such that it does not include any sensitive
Expand Down

0 comments on commit acb6562

Please sign in to comment.