This was already discussed earlier 
http://mail-archives.apache.org/mod_mbox/incubator-cloudstack-dev/201207.mbox/%3c2529883e7b666f4e8f21f85aada43ca70100e883a...@banpmailbox01.citrite.net%3e
The UI needs to be fixed for all such API calls that has password as parameter. 
There was already an issue in the old JIRA (refer old thread for bug ID), needs 
to be cloned if not present in apache JIRA.

-Koushik

-----Original Message-----
From: Harikrishna Patnala [mailto:harikrishna.patn...@citrix.com] 
Sent: Tuesday, November 20, 2012 3:03 PM
To: cloudstack-dev@incubator.apache.org
Subject: Using POST requests instead of GET for the commands containing password

Some commands include password parameter in the query string like when adding 
the external resources or hosts or cluster.
Since all of our API is GET, all parameters are present in the query string and 
are getting logged.

Is it better to change these specific requests into POST ?


Thanks

Reply via email to