We are running WAF assessment on an URL that has a form. We expect some checks, i.e. SQL Injections, to use the fields and method, but the report doesn’t show the form id and the method for that URL is still GET, despite the type is form.
The form is pretty basic, no funny javascript mess, however, it hasn’t the id attribute.
<form method="POST" action="some_action" name="some_name">
<input name="field1" type="hidden" value="">
...
</form>
Can we force the POST method for that URL?
Regards,