Skip to content

Disable form post by default - #1139

Merged
Shane32 merged 3 commits into
developfrom
disable_form_post
Aug 4, 2024
Merged

Shane32 merged 3 commits into
developfrom
disable_form_post

Conversation

@Shane32

@Shane32 Shane32 commented Aug 4, 2024

Copy link
Copy Markdown
Member

Form post requests are not recommended, mostly due to CSRF concerns. Also the draft GraphQL-over-HTTP specification does not define the format of such a request. Since v7 we have stated that form post requests would be disabled by default in future versions. This PR disables form post requests by default.

@Shane32 Shane32 added this to the 8.0 milestone Aug 4, 2024
@Shane32 Shane32 self-assigned this Aug 4, 2024
@Shane32
Shane32 requested a review from gao-artur August 4, 2024 05:10
@Shane32 Shane32 linked an issue Aug 4, 2024 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Disable ReadFormOnPost by default

2 participants

⌂ 换网址