https://souljian.cn/tags/post/Recent content in POST on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088146/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088146/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>本文讲 HTTP 方法基础，不涉及攻击技术。</p> <h2 id="一http-方法对比">一、HTTP 方法对比 </h2><img src="https://souljian.cn/img/http-methods.svg" alt="HTTP 方法幂等性与安全性" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">幂等性：多次请求结果相同 </span></span><span class="line"><span class="cl">安全性：不改变服务器状态 </span></span><span class="line"><span class="cl">GET = 幂等 + 安全 </span></span><span class="line"><span class="cl">POST/PUT/DELETE = 非安全 </span></span></code></pre></td></tr></table> </div> </div><h2 id="二get-方法">二、GET 方法 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">幂等：✅ 是 </span></span><span class="line"><span class="cl">安全：✅ 是 </span></span><span class="line"><span class="cl">用途：查询/搜索/详情 </span></span><span class="line"><span class="cl">危险：URL 记录在日志 · 浏览器缓存 </span></span></code></pre></td></tr></table> </div> </div><h2 id="三post-方法">三、POST 方法 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">幂等：❌ 否 </span></span><span class="line"><span class="cl">安全：❌ 否 </span></span><span class="line"><span class="cl">用途：创建/提交表单 </span></span><span class="line"><span class="cl">幂等解决：使用 Idempotency-Key </span></span></code></pre></td></tr></table> </div> </div><h2 id="四putdelete">四、PUT/DELETE </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">PUT：幂等 ✅ · 安全 ❌ · 用途：更新完整资源 </span></span><span class="line"><span class="cl">DELETE：幂等 ✅ · 安全 ❌ · 用途：删除资源 </span></span></code></pre></td></tr></table> </div> </div><h2 id="五小结">五、小结 </h2><p>GET = 幂等 + 安全，是唯一安全的 HTTP 方法。POST 是非幂等的，PUT/DELETE 是幂等但非安全的。理解这些特性对 API 设计和安全审计都很重要。</p>