Safe approach to HTTP request methods with a graphql/API application that only requires GET and POST
My application uses GET for requests for the main application and POST for the API route.
I’ve read here that best HEAD should be allowed in best practice as crawlers etc can use it and it is generally considered safe (in the way GET is as…