This was already discussed earlier http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-dev/201207.mbox/%3c2529883e7b666f4e8f21f85aada43ca70100e883a...@banpmailbox01.citrite.net%3e The UI needs to be fixed for all such API calls that has password as parameter. There was already an issue in the old JIRA (refer old thread for bug ID), needs to be cloned if not present in apache JIRA.
-Koushik -----Original Message----- From: Harikrishna Patnala [mailto:harikrishna.patn...@citrix.com] Sent: Tuesday, November 20, 2012 3:03 PM To: cloudstack-dev@incubator.apache.org Subject: Using POST requests instead of GET for the commands containing password Some commands include password parameter in the query string like when adding the external resources or hosts or cluster. Since all of our API is GET, all parameters are present in the query string and are getting logged. Is it better to change these specific requests into POST ? Thanks