logoalt Hacker News

physicalecontoday at 1:28 AM1 replyview on HN

Imagining you have a navigation to “/logout” that server side invalidates your token and redirects to home, would you implement that as a link? If so, what happens if someone tries to “open in a new tab” it?


Replies

angrybardstoday at 7:22 AM

Yea I think a form that posts is the right tool for the job here. It is clearly unsafe semantics.