SymfonyCasts on Mythryl: “A cautionary tale for web developers: If a request changes state, it…”

A cautionary tale for web developers: If a request changes state, it should never be a GET. Browsers, crawlers, and link previewers are allowed to make GET requests automatically. The garage door story is worth hearing... 😅 youtu.be/A4ujMeiG_v8

youtu.beA Cautionary Tale About GET RequestsA cautionary tale for every web developer. Someone built a smart garage door controller with a GET endpoint that toggled the door. Sounds convenient... until a browser, crawler, or link preview decided to "help" by making the request automatically. If a request changes state, it should never be a GET. Watch the full SymfonyCasts lesson 👉 https://symfonycasts.com/screencast/symfony8-security/logout-csrf

30/7/26, 8:01 am1 repost1 like

Post