Unverified50% confidenceFactExact time
登录接口几乎清一色使用 POST 的根本原因是 URL 会被浏览器历史、服务器日志、网络设备记录，密码以 GET 参数出现会泄露明文凭据
1
Sources
50%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
Related Claims
UnverifiedThe server-side log page records raw HTTP interactions, and the status codes and error descriptions are closer to the root cause than the secondary-wrapped information returned in the terminal.65% similarUnverifiedPostel法则'对自己发送的东西要严格，对接收的东西要宽容'原本主要应用于网络协议层面62% similarUnverified将登录后的ChatGPT页面内容复制粘贴到第三方网址会暴露会话令牌，攻击者可静默刷新access_token实现账号持续控制，即使修改密码在令牌被服务器撤销前依然有效62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/397643API
curl https://kongchang.com/api/v1/knowledge/claims/397643MCP
get_claim(id=397643)