We need to change all GET requests to POST for one of our applications.

Solution Verified - Updated -

Issue

  • We need to change all GET requests to POST for one of our applications.
  • Receiving the following security vulnerability:
Vulnerability: The application is sending sensitive information in GET request. This information is visible in the browser history even after logout.
Recommendation: Sensitive information should not be passed in the GET requests. Any sensitive information must be transmitted using POST requests

Environment

  • Red Hat JBoss Enterprise Application Platform 5.x
  • Red Hat JBoss Enterprise Application Platform 6.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content