Comment by frognibble

No, it's not entirely the fault of GET. The browser does not prevent script from triggering POSTs to third party sites.