We need to change all GET requests to POST for one of our applications.
Issue
- We need to change all GET requests to POST for one of our applications.
- Receiving the following security vulnerability:
Vulnerability: The application is sending sensitive information in GET request. This information is visible in the browser history even after logout.
Recommendation: Sensitive information should not be passed in the GET requests. Any sensitive information must be transmitted using POST requests
Environment
- Red Hat JBoss Enterprise Application Platform 5.x
- Red Hat JBoss Enterprise Application Platform 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.