• ItsMyFirstDay@lemmy.world
    link
    fedilink
    arrow-up
    11
    ·
    1 year ago

    I’m not 100% on this but I think GET requests are logged by default.

    POST requests, normally used for passwords, don’t get logged by default.

    BUT the Uri would get logged would get logged on both, so if the URI contained @username:Password then it’s likely all there in the logs

    • bleistift2@feddit.de
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      GET requests are logged

      That’s why I specified

      the receiving web server doesn’t log the URI

      in my question.

    • SzethFriendOfNimi@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Get and post requests are logged

      The difference is that the logged get requests will also include any query params

      GET /some/uri?user=Alpha&pass=bravo

      While a post request will have those same params sent as part of a form body request. Those aren’t logged and so it would look like this

      POST /some/uri