> Any decent webdev should not let GET/HEAD/OPTIONS modify state > additionally ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

bwblabs 37 days ago | parent | context | favorite | on: Developers don't understand CORS (2019)

> Any decent webdev should not let GET/HEAD/OPTIONS modify state

> additionally PUT/DELETE should also be idempotent

Yes, but I think the majority of large web applications are not fully correct in terms of 'Safe and Idempotent Methods' (https://datatracker.ietf.org/doc/html/rfc9110#name-common-me...).

rswail 37 days ago [–]

That's because they're badly written by people that don't understand that REST doesn't mean JSON+POST+GET.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact