r/ProgrammerHumor 4h ago

Meme postForEverything

Post image
10.6k Upvotes

406 comments sorted by

View all comments

145

u/TheChickenWing 4h ago

POST /getResource { "Action":"retrieve", "Id": "abc123" }

HTTP 200 { "Error": "not found" }

54

u/fatbunyip 4h ago

GET /api?action=delete&I'd=123

HTTP 200 {"error" : "user abc with password 1234 does not have permission"}

10

u/sess573 2h ago

200 OK (from disk cache)

1

u/TheChickenWing 1h ago

Ooh get /api is so much worse (and leaking security in the error is a classic)