Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You can always configure your HTTP logger to not log query parameters.


From a security perspective it is best to assume everything in a GET query is public, it's not always your server logs that you have to worry about, it could also be logs on the clients system (as an example).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: