You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@wookie.apache.org by "Scott Wilson (JIRA)" <ji...@apache.org> on 2014/03/04 12:34:21 UTC

[jira] [Created] (WOOKIE-427) Send idkey in header rather than in URL

Scott Wilson created WOOKIE-427:
-----------------------------------

             Summary: Send idkey in header rather than in URL
                 Key: WOOKIE-427
                 URL: https://issues.apache.org/jira/browse/WOOKIE-427
             Project: Wookie
          Issue Type: Improvement
          Components: Server
    Affects Versions: 2.0.0
            Reporter: Scott Wilson


When a widget sends an API request, e.g. to get preferences or set a preference, it should include the ID_KEY in a header field rather than in the querystring, as this reduces the likelihood of the parameter being extracted and misused.



--
This message was sent by Atlassian JIRA
(v6.2#6252)