apache / apache/infrastructure-asfquart
GET methods which change state should be POSTs and blocked
Open
enhancement
no hurry
- Dominant language
- Python
- Stars
- 7
- Forks
- 12
- PR merge metrics
- No merged PRs in 30d
Description
There are endpoints like `/auth?logout` where GET should be blocked. Since there are many downstream users of asfquart using GET we should configure a strict mode and reject GET for these cases.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.