@[email protected] to Ask [email protected] • 2 years agoWhat's a company secret you can share now that you no longer work there?message-square977fedilinkarrow-up11.37Karrow-down114
arrow-up11.36Karrow-down1message-squareWhat's a company secret you can share now that you no longer work there?@[email protected] to Ask [email protected] • 2 years agomessage-square977fedilink
minus-square@[email protected]linkfedilink10•2 years agoI’m not 100% on this but I think GET requests are logged by default. POST requests, normally used for passwords, don’t get logged by default. BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs
minus-square@[email protected]linkfedilink2•2 years agoGet and post requests are logged The difference is that the logged get requests will also include any query params GET /some/uri?user=Alpha&pass=bravo While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this POST /some/uri
I’m not 100% on this but I think GET requests are logged by default.
POST requests, normally used for passwords, don’t get logged by default.
BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs
Get and post requests are logged
The difference is that the logged get requests will also include any query params
GET /some/uri?user=Alpha&pass=bravo
While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this
POST /some/uri