We need to change all GET requests to POST for one of our applications.
Issue
- We need to change all GET requests to POST for one of our applications.
- Receiving the following security vulnerability:
Vulnerability: The application is sending sensitive information in GET request. This information is visible in the browser history even after logout.
Recommendation: Sensitive information should not be passed in the GET requests. Any sensitive information must be transmitted using POST requests
Environment
- Red Hat JBoss Enterprise Application Platform 5.x
- Red Hat JBoss Enterprise Application Platform 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
