Warn users who abuse GET about instantclick

[StefanoRausch]

I just have discovered this project and I have read that there is a blacklist feature ( now the default ). This should cover your scenario.

[benjamingr]

What I meant is that for the very least I should be warned when a URL that seems stateful is fetched.

[exussum12]

@benjamingr you shouldnt really be able to log out of a website with a GET request http://stackoverflow.com/questions/705782/why-shouldnt-data-be-modified-on-an-http-get-request

[benjamingr]

@exussum12 exactly. Which is why I labeled this issue "Warn users who abuse GET"

[dieulot]

I’ll try to make it more obvious on the website that there is blacklisting, and what is its use. But I won’t make the script warn you when you use it. Because detecting URLs that triggers an action is prone to false positives/negatives, it provides a false sense of security, and because of the false positives it will get in others’ way.

[StefanoRausch]

👍 @dieulot