IMO apps that do this have a bug, and possibly a security one. This causes issues with prefetching, bot traffic, caching, CSRF, and just plain violates HTTP standards.

▲

pinoy420 6 days ago | parent | next [-]

Not really. If I have a service where I need one click to perform an action and store data. It has to be a GET. You can’t post from a url… purist dogma for the sake of purist dogma

▲

FireInsight 6 days ago | parent [-]

One click to perform an action and store data? Have you heard of HTML forms with method="post"?

	▲	whatabtemaillnk 6 days ago \| parent [-]
		[dead]

▲

pstuart 7 days ago | parent | prev [-]

Agreed. Those methods should be treated as idempotent.

▲

almog 7 days ago | parent [-]

> Those methods should be treated as idempotent

Idempotency still implies it can change state on the initial call, which to me feels wrong in the context of GET/HEAD/OPTIONS.

	▲	Mavvie 7 days ago \| parent [-]
		Indeed, the correct term here is nullipotent.