News for hackers. Stuff that matters.
Re:Millions of email addresses leaking to advertising and an... by shkkmo on Friday May 01, 2020 @09:43AM (#23041889)
> Marketing 101: User actions should take as little clicks as possible, so the action should be performed as soon as the user clicks the (GET) link.

Nope, some email clients might prefetch urls in email for various reasons. You should absolutely NOT do this (unless you are decitefully trying to game you engagement metrics.) The only case where you might be able to get away with it is when the user has an active login session that you can verify prior to performing the action.

There are no comments on this comment yet.