News for hackers. Stuff that matters.

A comment on Gmail is opening and caching URLs within emails without user intervention (2019). Parent comment

Re:Gmail is opening and caching URLs within emails without u... by Tade0 on Friday August 20, 2021 @06:34AM (#28244593)
This endpoint is idempotent - clicking that link multiple times has the same effect as doing it once.
[ Parent | on HN ]
Re:Gmail is opening and caching URLs within emails without u... by shadowgovt on Friday August 20, 2021 @10:30AM (#28246442)
Correct. Idempotency isn't precisely the right concept to appeal to here. The right concept is that GET requests are assumed by convention to be "safe," which implies they aren't tied to user interaction. "...user did not request the side-effects, so therefore cannot be held accountable for them" (https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#:~:te....).
[ Parent | on HN ]
Re:Gmail is opening and caching URLs within emails without u... by account42 on Friday August 20, 2021 @06:51AM (#28244672)
Presumably there is a different content for the first response when the token is still valid, otherwise this would be a pointless link.
[ Parent | on HN ]
Re:Gmail is opening and caching URLs within emails without u... by tantalor on Friday August 20, 2021 @08:18AM (#28245194)
Not if it "disappears after access"
[ Parent | on HN ]