1 | initial version |
It's not a matter of GET or POST as the issue is in the query string passed during WebSocket creation. This is not visible in the browser's address bar / history, but it can be easily spotted when inspecting the calls.
It's a "feature" from the early days of the project, predating the day we took over the project, and it's currently being refactored to avoid such leaks.
Note: this does not affect OpenStack connections as connection parameters are obtained from Nova.