The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.