Credentials in URL
Credentials in URLs means putting passwords or tokens in URL query parameters or paths, which leak through logs, browser history, and Referer.
Purpose
To understand the multi-channel leakage risks of URL credentials and their defenses; a basic secure-coding requirement.
Mechanism
URL credentials leak to third parties via server logs, proxy logs, browser history, and the Referer header. Defenses: pass credentials via the Authorization header or a POST body; avoid URL credentials even under HTTPS.
Use cases
- Credential leakage defense
- Secure coding audit
- Log security
Related tools
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL