New HTTP Query Method Allows GET Requests with Bodies
SANS ISC highlights a new HTTP method that formalizes GET requests with a body, addressing a long-standing ambiguity.
According to the SANS Internet Storm Center, a new HTTP method called Query has been introduced. This method is designed to allow GET requests that include a body, which is unusual because standard GET requests typically do not carry one.
The motivation behind Query is to resolve the ambiguity of what happens when a GET request does include a body. By providing a dedicated method, the new standard offers a clear way to handle such requests, potentially affecting how servers and security tools interpret them.
The source does not elaborate on specific security implications, but the change is notable for anyone involved in web protocol analysis or security monitoring.
More in Security & Privacy
Canada Probes IDScan After Breach of 153M Driver's Licenses
Privacy Commissioner opens investigation into IDScan.net's security practices and breach notifications after stolen ID scans of 153 million people appeared on the dark web.
AI Relay Servers Mask Chinese Access to US Frontier Models
More than 80,000 AI relay servers are helping users in China hide their identities while accessing cutting-edge US AI models, likely to clone them.
Sweden Fines Miljödata $183,000 for Breach Affecting 2.2 Million
Sweden's privacy regulator penalized IT provider Miljödata for security failures linked to a breach that exposed 2.2 million people's data.
Rogue External MFA Providers Can Steal Passwords in Login Attacks
Researchers show that attackers with privileged access can register a malicious external MFA provider that harvests passwords during otherwise legitimate logins.