While GetOnly does suggest only GET requests should be supported I think it'd be way more useful of a setting if HEAD requests were also allowed with GetOnly set. HEAD requests are functionally similar to GET with the exception that the body of the reply is not expected. HEAD requests are useful for monitoring when you just want to see if the HTTP status is 200. And the main purpose I see behind GetOnly is to block DoS via pushing request bodies and random methods that various bots spam HTTP servers with.
Hi,
While GetOnly does suggest only GET requests should be supported I think it'd be way more useful of a setting if HEAD requests were also allowed with GetOnly set. HEAD requests are functionally similar to GET with the exception that the body of the reply is not expected. HEAD requests are useful for monitoring when you just want to see if the HTTP status is 200. And the main purpose I see behind GetOnly is to block DoS via pushing request bodies and random methods that various bots spam HTTP servers with.