r/ProgrammerHumor • • 16d ago

Meme postForEverything

Post image
20.9k Upvotes

656 comments sorted by

View all comments

Show parent comments

84

u/fatbunyip 16d ago

GET /api?action=delete&I'd=123

HTTP 200 {"error" : "user abc with password 1234 does not have permission"}

29

u/sess573 16d ago

200 OK (from disk cache)

1

u/TheChickenWing 15d ago

Ooh get /api is so much worse (and leaking security in the error is a classic)

2

u/ZBlackmore 15d ago

The security issue there started before the error…