Re: Deprecating logout via GET

2020-02-28 Thread René Fleschenberg
Hi, On 2/28/20 5:04 PM, 'Maher, Brian' via Django developers (Contributions to Django itself) wrote: > Are any current browsers dumb enough to prefetch logout links these > days? I would assume that most prefetch algorithms are smart enough to > not pre-fetch these. We not only have to consider b

Re: Deprecating logout via GET

2020-02-28 Thread Florian Apolloner
On Friday, February 28, 2020 at 5:08:07 PM UTC+1, Maher, Brian wrote: > > Are any current browsers dumb enough to prefetch logout links these days? > I would assume that most prefetch algorithms are smart enough to not > pre-fetch these. > Not sure what heuristics browsers use. I have also s

Re: Deprecating logout via GET

2020-02-28 Thread 'Maher, Brian' via Django developers (Contributions to Django itself)
I’m on the other side of the fence – I don’t think this is a necessary change. The examples given in historic tickets are not worthy of a change like this in my opinion. For example, take the example regarding a bot crawling a website, and losing its session by crawling the logout link – if you

Re: Deprecating logout via GET

2020-02-28 Thread Adam Johnson
Wow and first ticket referenced in one of those conversations was 12 years ago: https://code.djangoproject.com/ticket/7989 Seems like a of a no-brainer at this point with general support from other core devs in the past :) On Fri, 28 Feb 2020 at 00:10, René Fleschenberg wrote: > Hi, > > On 2/28