Re: HTTP_STATUS_CODE":302" with QSYS2.HTTP_GET_VERBOSE

Hello Jack,

Am 29.11.2024 um 17:54 schrieb Jack Woehr via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

That's what browsers do. "Silently." The only observable thing might be the change of the string in the URL line.

Yes, but browsers have human eyes on them.

Indeed. You clearly have a point here.

But, as long as browsers don't hide details and just display the domain name, your objection isn't entirely well-founded. Hiding details has become annoyingly ubiquitous in browsers in the last years.

A silent redirect handed to a program is a more questionable thing.

Well, why? The redirect can only be set by the original server admin.

But then, servers can be hacked.

Which is true for the server doing the redirect, but also for the target server.

My point is: There is no silver bullet. Browsers do it almost entirely transparent, and there are arguments against and pro doing the same in automating. Maybe — again — using a middle ground is best? Upon encountering a redirect, don't fail, don't follow silently, but make the responsible person aware of the redirect for further investigation.

I wasn't necessarily endorsing what the QSYS2 stuff does. I was just guessing at the reason it was coded that way.

No worries, I understood this before. :-)

:wq! PoC