tag: Rfc · 1 items
- Engineer — Learn: The new QUERY method sits between GET and POST semantics, meaning existing WAF rules, reverse proxies, and security controls may handle it inconsistently or not at all — worth understanding before adopting it in APIs or encountering it in the wild.
- SOC/IR — Learn: A new HTTP verb with ambiguous semantics may appear in traffic without triggering existing method-based detection rules; no active exploitation context, but analysts should know to expect it in logs and WAF telemetry.
- Leader — Skip