ampproject / amphtml

The AMP web component framework.
https://amp.dev
Apache License 2.0
14.89k stars 3.89k forks source link

amp-form docs unclear about XSRF protection #38347

Open vszabo2 opened 2 years ago

vszabo2 commented 2 years ago

Description

At https://amp.dev/documentation/components/amp-form/?format=email#protecting-against-xsrf, it says:

Only use POST for state changing requests.

It is not clear if this means "for anything other than state changing requests, don't use POST" or "for state changing requests, don't use anything other than POST."

Reproduction Steps

Doc bug https://amp.dev/documentation/components/amp-form/?format=email#protecting-against-xsrf

Relevant Logs

No response

Browser(s) Affected

No response

OS(s) Affected

No response

Device(s) Affected

No response

AMP Version Affected

No response

stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions.