Alright, what if the request is actually idempotent?
I meant to qualify your statement further. I mean that making the
request or not is not that important so long as both (1) access to the
result is denied and (2) the request is actually idempotent. A GET
request is supposed to be idempotent, but if it's not, then having
that request made on redirect could cause problems.
I have absolutely no idea what you are talking about.
At some point a few years back a browser plug-in was released; I
think it might have been Google Web Accelerator. [1] This tool was
supposed to speed up browsing by pre-fetching and caching links it
thought you might visit off the current page. It makes perfect sense,
except that a number of web applications out there had non-idempotent
GET request, especially hyperlinked "delete row" actions. People
started unintentionally altering all sorts of data using this tool.
Granted, it was the fault of people not smart enough to develop
properly with HTTP, but it was pretty easy to blame Google. The plug-
in is long gone now.
-- Scott
____________________
[1]
http://en.wikipedia.org/wiki/Google_Web_Accelerator