Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GET and POST must not be used to tunnel other request methods #28

Closed
BlueWaves2 opened this issue Aug 23, 2022 · 0 comments · Fixed by #40
Closed

GET and POST must not be used to tunnel other request methods #28

BlueWaves2 opened this issue Aug 23, 2022 · 0 comments · Fixed by #40
Assignees
Labels
enhancement New feature or request rule Rule implementation issues task

Comments

@BlueWaves2
Copy link
Collaborator

Description

Tunneling refers to any abuse of HTTP that masks or misrepresents a message’s intent
and undermines the protocol’s transparency. A REST API must not compromise its
design by misusing HTTP’s request methods in an effort to accommodate clients with
limited HTTP vocabulary.

Antipatterns

Following Antipatterns need to be considered:

  • POST is used to retrieve a representation of resource
  • POST is used to delete a resource
  • GET is used to delete a resource
  • POST is used to create a resource
@BlueWaves2 BlueWaves2 added the enhancement New feature or request label Aug 23, 2022
@BlueWaves2 BlueWaves2 added task rule Rule implementation issues labels Aug 23, 2022
@BlueWaves2 BlueWaves2 self-assigned this Sep 2, 2022
@BlueWaves2 BlueWaves2 mentioned this issue Sep 20, 2022
12 tasks
danielabajirov added a commit that referenced this issue Sep 20, 2022
xJREB pushed a commit that referenced this issue Aug 25, 2023
Former-commit-id: a269c66458b8b399549a7466265b449696a5b3cb [formerly 685c67d]
Former-commit-id: 6ebb243a2e649762149951244fa9c23eba147c19
Former-commit-id: dd4ff6655e6f9c49ebce9d2531858ee6aaeee715
xJREB pushed a commit that referenced this issue Aug 25, 2023
…unauthorized

Former-commit-id: 39cf015ba2f69acd7e2c3b3c073d80b7e2367c73 [formerly c029bb6]
Former-commit-id: 5efafdff4fdb349c18678ef98b03a5aef55bc929
Former-commit-id: 92ea9ee313e0253e492f0f6230052972a512a75c
xJREB pushed a commit that referenced this issue Aug 25, 2023
Former-commit-id: 72bdb2907d5871dd190b9c5e0986893f84e9473d [formerly 55b465e]
Former-commit-id: ca7640cd347b620b3a779c8bc2f47f075e39fde5
Former-commit-id: b0da0b568082348a952bf236f2bbd06aee010609
xJREB pushed a commit that referenced this issue Aug 25, 2023
Rule/#28/tunneling

Former-commit-id: 64666a08873b6e3543bdd0dd4501aadc2406c66f [formerly c2ea70d]
Former-commit-id: 489ec3d9ec5891eb794765d78bbe87ee2df6fcbc
Former-commit-id: 8fdd2405c0d913cf3919f87b1db9477cd3b05951 [formerly c60878e05d4908cc5f8e1e783e3c7f8091e51b71]
Former-commit-id: 4bd7a840d6c992f46659a80c35481f7a2145591e
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request rule Rule implementation issues task
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant