Sign in

Terminology Index

Glossary

1 term tagged "http-method"

Open concept maps

Showing 1-1 of 1 term

H
1

HTTP Method

The verb in an HTTP request, such as GET, POST, PUT, or DELETE, that indicates the action the client wants to perform. Methods carry security meaning, since some change data and access control must account for which are allowed.

Every HTTP request specifies a method describing the intended action: GET retrieves, POST submits, PUT updates, DELETE removes, and others exist. Methods matter for security because state-changing ones (POST, PUT, DELETE) need protection like CSRF defenses and proper authorization, and because misconfigured servers that allow unexpected methods can be abused. Reading the method is basic to analyzing requests, designing access control, and understanding web attacks.

Introduced in: Defensive Web Fundamentals

Examples

  • A POST request submitting data versus a GET that only retrieves it.
  • Restricting which HTTP methods an endpoint accepts for safety.
  • Recognizing that state-changing methods need CSRF protection.
sharedfoundationalhttp-method

No related terms linked yet.