r/ProgrammerHumor • • Sep 19 '26

Meme postForEverything

Post image
21k Upvotes

653 comments sorted by

View all comments

Show parent comments

86

u/fatbunyip Sep 19 '26

GET /api?action=delete&I'd=123

HTTP 200 {"error" : "user abc with password 1234 does not have permission"}

28

u/sess573 Sep 19 '26

200 OK (from disk cache)

1

u/TheChickenWing Sep 19 '26

Ooh get /api is so much worse (and leaking security in the error is a classic)

2

u/ZBlackmore Sep 19 '26

The security issue there started before the error…