Previously [0] 0. https://news.ycombinator.com/item?id=45307459
We'll merge that comment hither. Thanks!
The timestamps remained accurate! That's awesome.
Fine-grained HTTP filtering for Claude Code
11–12 of 12 posts
Re: Fine-grained HTTP filtering for Claude Code
#12> Allow only GET requests i.e. make the internet read-only If only developers never made use of GET to modify resources... https://www.reddit.com/r/webdev/comments/6999x7/comment/dh4v...
Am I misunderstanding this one? GET still sends information to another server, what is the "read only" aspect?
As others mentioned, GET requests are supposed to be idempotent, i.e., you can send the same request 100 times and get the same response (with no server side-effects) 100 times.
GET requests are also easier to be abused in Cross Site Request Forgery (CSRF) attacks. Modern countermeasures in browsers (like SameSite cookies) will protect cross-origin POST and other state-changing methods, but will largely allow GET requests to go through while carrying session cookies.