IETF Officially Adds HTTP QUERY Method to Fix Long-Standing API Design Problem

·2 views

The Internet Engineering Task Force published RFC 10008 in June 2026, formally introducing the HTTP QUERY method as a new standard. The method was created to address a decades-old problem where developers had to misuse POST for complex, read-only search requests that were too large for a URL. Unlike POST, QUERY is defined as safe and idempotent, meaning intermediaries and caches can treat it as a read-only operation that never modifies server state. It supports a structured request body, allowing complex filters, nested logic, and sorting parameters to be sent cleanly without bloating URLs. The addition is expected to improve API clarity, protect sensitive query parameters from server logs, and enable better caching support from CDNs and proxies.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Best UI Kits for Chrome Extensions in 2026: Why Web App Rankings Don't Apply

A developer at ExtensionBooster tested and ranked the top UI kits specifically for Chrome extensions, finding that popular choices like MUI, Chakra, and Mantine are optimised for standard web apps and often fail in extension environments. Chrome's Manifest V3 enforces strict Content Security Policies that block runtime CSS-in-JS libraries such as Emotion and styled-components from rendering correctly. Content scripts injected into third-party pages also face CSS bleed issues, making Shadow DOM compatibility a critical factor when choosing a UI kit. Bundle size is another key concern, as large component libraries can slow down a popup's first paint for end users. The author rebuilt the same extension popup, options page, and content-script overlay across multiple kits to produce a ranking tailored to these four extension-specific constraints.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cart Timer Killing Live Payments? The Fix Is Simpler Than You Think

A recurring bug across e-commerce platforms causes customers to lose their orders when a cart reservation timer expires mid-payment, even as their bank transaction succeeds. The timer's original purpose is to manage inventory contention between undecided customers, but that logic becomes irrelevant once a buyer enters the payment flow. Engineers who treat a zero-timer as an unconditional release trigger are following system rules correctly yet ignoring the real-world outcome for the paying customer. Developers argue that a successful payment authorization should always override an expired hold, since rejecting an already-approved charge forces a refund cycle that damages customer trust without protecting any other buyer. The true exception is genuine oversell — where another customer completed purchase first — which should be handled as an inventory failure with an instant refund, not framed as the customer's error.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Docker Healthchecks Confirm Process Response, Not Application Health

Docker's HEALTHCHECK instruction periodically runs a command inside a container and marks it healthy or unhealthy based solely on the exit code returned. The mechanism does not read response bodies, parse JSON, or verify whether dependencies like databases or queues are functioning correctly. Most common implementations simply confirm that a server process is accepting TCP connections, which can mask deeper failures such as exhausted connection pools or expired API tokens. When teams equate a green 'healthy' status with full application health, they tend to overlook logs, metrics, and other diagnostic signals. The real risk lies not in what the healthcheck measures, but in the broader assumptions developers and operators build around its limited output.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Docker healthchecks only check process response, not real app health

Docker's HEALTHCHECK instruction runs a periodic command inside a container and marks it healthy or unhealthy based solely on the exit code returned. The mechanism does not read response bodies, interpret JSON, or verify whether dependencies like databases or queues are actually functioning. A common pattern — a curl call to an endpoint that returns a static 200 OK — only confirms the process is accepting TCP connections, not that business logic is working. This gap becomes costly when teams treat a green 'healthy' status as a full signal of application health, reducing attention to logs and richer metrics. Developers bear full responsibility for implementing endpoints that genuinely probe critical dependencies if they want the healthcheck to reflect real application state.

0 comments Read more at DEV Community