Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
Fix request: Request without GET or POST
See original GitHub issueGreetings,
We are researchers and we are have identified insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of @RequestMapping" methods without POST or GET . According to the Common Weakness Enumeration and JAVA OWASP, this is a security weakness and needs to be avoided.
We request for a fix for this issue. Looking forward for your feedback.
Source:
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:6 (4 by maintainers)
Top Results From Across the Web
HTTP Request Methods – Get vs Put vs Post Explained with ...
In this article, we'll be discussing the get, put, and post HTTP methods. You'll learn what each HTTP method is used for as...
Read more >forms - When should I use GET or POST method? What's the ...
" A POST request gets input from the query string and through the request body." IMHO this is incorrect. To use either input...
Read more >Why is my browser sending an OPTIONS HTTP request ...
As you can see, the POST method is never sent and only a method called OPTIONS is sent to the endpoint. The response...
Read more >REST API using POST instead of GET - Tree Web Solutions
REST API using POST instead of GET. You can't use the API using POST or GET if they are not build to call...
Read more >How to Fix Request Method 'POST' Not Supported - Hyperping
The Request Method' POST' Not Supported error is caused by a mismatch of the web browser configuration and the browser's URL format. In...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Actually you are right. Without
methodPOST and GET are both executed.@ewolff
Our pleasure. As future work, we are planning to automatically repair these instances so that it is less work for for developers … any feedback on how we can do that?