News for hackers. Stuff that matters.
Re:Show HN: I created an After Effects alternative by gwervc on Monday July 01, 2024 @09:00AM (#40845435)
>- I pledge to only make GET requests to http://example.com/foo/*

Doesn't solve any trust issue since data can be send as part of the URL, and the backend response can change at will.

Re:Show HN: I created an After Effects alternative by Timon3 on Monday July 01, 2024 @10:00AM (#40845926)
That was just an example - it fully solves trust issues if the pledge is "only make GET requests to exactly example.com/favicon.ico or example.com/style.css". This way you can't send any data (as there's no body, and encoded data wouldn't match the URLs).