News for hackers. Stuff that matters.
Re:RFC 10008: The new HTTP Query Method by sheept on Wednesday June 17, 2026 @11:22AM (#48571743)
At least browsers wouldn't have to warn users that they'd be resubmitting data if they reload the page after submitting a query form, since query requests are intended to be idempotent
Re:RFC 10008: The new HTTP Query Method by amluto on Wednesday June 17, 2026 @11:47AM (#48572131)
You still get the nastiness that the Sec-Fetch-* state gets mostly trashed when you hit refresh. And someone would need to figure out how CORS preflight interacts with refresh, which is not currently an issue with POST. (The current "simple request" behavior or whatever it's called is a real mess and is the cause of a lot of CSRF vulnerabilities.)