Bottom line: The HTTP Query method's introduction increases the attack surface for web applications, as it enables the exploitation of previously secure "GET" requests.
What's happening: Xavier Niel, founder of Free Mobile, demonstrated the HTTP Query method on Friday, September 18, 2020, at the European Cyber Security Summit in Paris, France. The method was introduced to allow "GET" requests with a body, a departure from the traditional no-body policy for "GET" requests.
What to do: Security leaders should monitor their web applications for signs of exploitation and implement measures to prevent SQL injection and XSS attacks, such as validating user input and encoding sensitive data.