Turn cross-site POST requests into data-less GET requests
Posted: Tue May 24, 2011 5:34 am
I am trying to trigger the functionality "Turn cross-site POST requests into data-less GET requests" however I can't seem to make it trigger...
This code does not appear to be converted to a sanatized GET, although it could be because im running the code locally, dont have an external host to throw it up on at the moment.
<html>
<body>
<form name=TheForm action="http://www.example.com/" method='POST'>
<input type=hidden name='fields[]' value='badstuffyo' />
</form>
<script>
document.TheForm.submit();
</script>
</body>
</html>
This is what this option is supposed to block right? Or have I mis-understood...
Cheers,
VADiUM
This code does not appear to be converted to a sanatized GET, although it could be because im running the code locally, dont have an external host to throw it up on at the moment.
<html>
<body>
<form name=TheForm action="http://www.example.com/" method='POST'>
<input type=hidden name='fields[]' value='badstuffyo' />
</form>
<script>
document.TheForm.submit();
</script>
</body>
</html>
This is what this option is supposed to block right? Or have I mis-understood...
Cheers,
VADiUM