Comment by ks2048

So is “you can make GET requests, but not POST requests” an actual form of security people use?