Comment Comment by MajesticHobo2 Not sure I agree with this part:> Allow all GET, HEAD, or OPTIONS requests.> These are safe methods, and are assumed not to change state at various layers of the stack already.Plenty of apps violate this assumption and do allow GET requests to alter state. parent MajesticHobo2 1 year ago
> Allow all GET, HEAD, or OPTIONS requests.
> These are safe methods, and are assumed not to change state at various layers of the stack already.
Plenty of apps violate this assumption and do allow GET requests to alter state.