2013/10/16 Javier Guerra Giraldez <[email protected]>

> yes, they're different, but is there any value in emphasizing the
> difference?
>

The main value lies in emphasizing the difference between HTTP GET and HTTP
POST. That difference has security implications, especially with regards to
CSRF.

While pour point is technically valid as far as request.GET and
request.POST are concerned, in practice they're so commonly used as a
metonymy for HTTP GET and HTTP POST that it's worth having a strong stance
on keeping them separate.

-- 
Aymeric.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/django-developers.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CANE-7mXpmgE-kzMV9Bj-X%2BrUtoSJf493O11C6zo0itVOorn8Qw%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to