Hi,
our APEX application was checked by an external security company and unfortunately, it is possible to submit a page/ form using a GET even though it should only be possible using POST.
The company marked this as a weakness against Cross-Site Request Forgery.
Is there anything on a page-, application-, workspace- or instance-level to limit the submit of forms only to POST?
If it is not possible directly, do you have ideas how to achieve this?
Thanks in advance.