Challenge 2 / 2

You have a "vote up/down" feature on a teddy bear review website. Why is it not a good idea for these endpoints to accept GET requests?

Because GET requests can’t include any data, so the server wouldn’t know which review to vote on.

Because another site could cause your browser to hit a GET vote URL (like an image or link), letting it vote on your behalf without you clicking anything.

Because GET requests are always cached by the browser, so everyone would see the same vote count even after voting.

Because voting changes data, and GET links can be triggered automatically (previews, crawlers, prefetch). That could make someone upvote/downvote without meaning to.

Rewatch the video