Java servlet: do parameters sent with doGet() get encoded using HTTPS? -
Java servlet: do parameters sent with doGet() get encoded using HTTPS? -
if have java servlet using doget()
such as:
public class myservlet extends httpservlet { protected void doget(httpservletrequest request, httpservletresponse response) ... param1 = request.getparameter("param1"); ...
and gets accessed calling https://www.mydomain.com/myservlet?param1=hello
.
is param1
secure since i'm using https (that is, param1
not visible user accessing link)? or, visible because doget()
places param1 in html header? if latter, what's equivalent dopost()
here?
if link originates in https site, fine.
if link not originate in https site, not. if literally set link on site, or same site using http. if had http://www.example.com/
, linked https://www.example.com/myservlet?param1=hello
wouldn't secure because printed out link on plain text.
java servlets
Comments
Post a Comment