-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
GET and POST must not be used to tunnel other request methods #28
Labels
Comments
BlueWaves2
added a commit
that referenced
this issue
Sep 7, 2022
manuelmerkel
added a commit
that referenced
this issue
Sep 7, 2022
BlueWaves2
added a commit
that referenced
this issue
Sep 19, 2022
xJREB
pushed a commit
that referenced
this issue
Aug 25, 2023
Former-commit-id: a269c66458b8b399549a7466265b449696a5b3cb [formerly 685c67d] Former-commit-id: 6ebb243a2e649762149951244fa9c23eba147c19 Former-commit-id: dd4ff6655e6f9c49ebce9d2531858ee6aaeee715
xJREB
pushed a commit
that referenced
this issue
Aug 25, 2023
…unauthorized Former-commit-id: 39cf015ba2f69acd7e2c3b3c073d80b7e2367c73 [formerly c029bb6] Former-commit-id: 5efafdff4fdb349c18678ef98b03a5aef55bc929 Former-commit-id: 92ea9ee313e0253e492f0f6230052972a512a75c
xJREB
pushed a commit
that referenced
this issue
Aug 25, 2023
Former-commit-id: 72bdb2907d5871dd190b9c5e0986893f84e9473d [formerly 55b465e] Former-commit-id: ca7640cd347b620b3a779c8bc2f47f075e39fde5 Former-commit-id: b0da0b568082348a952bf236f2bbd06aee010609
xJREB
pushed a commit
that referenced
this issue
Aug 25, 2023
Rule/#28/tunneling Former-commit-id: 64666a08873b6e3543bdd0dd4501aadc2406c66f [formerly c2ea70d] Former-commit-id: 489ec3d9ec5891eb794765d78bbe87ee2df6fcbc Former-commit-id: 8fdd2405c0d913cf3919f87b1db9477cd3b05951 [formerly c60878e05d4908cc5f8e1e783e3c7f8091e51b71] Former-commit-id: 4bd7a840d6c992f46659a80c35481f7a2145591e
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
Tunneling refers to any abuse of HTTP that masks or misrepresents a message’s intent
and undermines the protocol’s transparency. A REST API must not compromise its
design by misusing HTTP’s request methods in an effort to accommodate clients with
limited HTTP vocabulary.
Antipatterns
Following Antipatterns need to be considered:
The text was updated successfully, but these errors were encountered: