1381
What's a company secret you can share now that you no longer work there? (lemmy.world)
submitted 3 years ago by to c/asklemmy@lemmy.world
972 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 3 years ago (2 children)

I'm not 100% on this but I think GET requests are logged by default.

POST requests, normally used for passwords, don't get logged by default.

BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it's likely all there in the logs

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago

    Get and post requests are logged

    The difference is that the logged get requests will also include any query params

    GET /some/uri?user=Alpha&pass=bravo

    While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this

    POST /some/uri

  • permalink
  • fedilink
  • source
  • parent