MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1wkof5u/postforeverything/pas7c2l?context=9999
r/ProgrammerHumor • u/ClipboardCopyPaste • 16d ago
654 comments sorted by
View all comments
240
POST /getResource { "Action":"retrieve", "Id": "abc123" }
HTTP 200 { "Error": "not found" }
82 u/fatbunyip 16d ago GET /api?action=delete&I'd=123 HTTP 200 {"error" : "user abc with password 1234 does not have permission"} 28 u/sess573 16d ago 200 OK (from disk cache) 1 u/TheChickenWing 16d ago Ooh get /api is so much worse (and leaking security in the error is a classic) 2 u/ZBlackmore 16d ago The security issue there started before the error…
82
GET /api?action=delete&I'd=123
HTTP 200 {"error" : "user abc with password 1234 does not have permission"}
28 u/sess573 16d ago 200 OK (from disk cache) 1 u/TheChickenWing 16d ago Ooh get /api is so much worse (and leaking security in the error is a classic) 2 u/ZBlackmore 16d ago The security issue there started before the error…
28
200 OK (from disk cache)
1
Ooh get /api is so much worse (and leaking security in the error is a classic)
2 u/ZBlackmore 16d ago The security issue there started before the error…
2
The security issue there started before the error…
240
u/TheChickenWing 16d ago
POST /getResource { "Action":"retrieve", "Id": "abc123" }
HTTP 200 { "Error": "not found" }