Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

9
  • 6
    I don't think this is agreed-upoin best practice. In particular, if the request is idempotent, it is best practice to use GET and not PUT (for cacheability, among other things). And URL length limits are quite large nowadays, so not necessarily a problem. Commented Aug 31, 2018 at 9:52
  • @sleske If you think GET is better you should write an answer about why. String z can be 4Mb long though Commented Aug 31, 2018 at 9:58
  • actually just googling and the max json string length seems uncertain Commented Aug 31, 2018 at 10:02
  • 1
    @ThomasJunk what context do you refer to? the string is called 'z', there could be literally anything in it. whats the GDPR fine $20m? Commented Sep 2, 2018 at 14:59
  • 1
    @ThomasJunk the standard log will also have the ip. But yes we digress. the point isnt that you log the info, its that you dont realise you are logging the info and get caught out in an audit. Best practice is to only log specfic info, not anything the user sends Commented Sep 2, 2018 at 15:15