diff --git a/draft-ietf-httpbis-safe-method-w-body.xml b/draft-ietf-httpbis-safe-method-w-body.xml index b759be8ac..9637d6e96 100644 --- a/draft-ietf-httpbis-safe-method-w-body.xml +++ b/draft-ietf-httpbis-safe-method-w-body.xml @@ -365,6 +365,15 @@ Dubois, Camille, camille.dubois@example.net considerations as all HTTP methods as described in . + + + The QUERY method can be used as an alternative to passing query + information in the query portion of a URI. This is preferred in some + cases, as the URI is more likely to be logged than the request content. If + a server creates a temporary resource to represent the results of a QUERY + request (e.g. for use in the Content-Location field), the URI of this + resource SHOULD NOT expose the original request content in plaintext. +