title: Query parameters were passed over SSL, and may contain sensitive information
body: <p>I am being forced to deal with IBM AppScan results.  This one is giving me head aches. I am getting the following flag from AppScan on the following executed statement (and others just like it).</p>
  
  <p>Flag: 
  Query parameters were passed over SSL, and may contain sensitive information
  Source:
  <a href="https://.../bundles/jqueryval?v=(version)" rel="nofollow noreferrer">https://.../bundles/jqueryval?v=(version)</a></p>
  
  <p>The root of it all seems to be Bundling and Minification.</p>
  
  <p>My RegisterBundles looks like this:
  </p>
  
  <pre><code>public static void RegisterBundles(BundleCollection bundles)
  {
      bundles.Add(new ScriptBundle("~/bundles/jquery").Include(
                         "~/Scripts/jquery-{version}.js"));
  ...
  }
  </code></pre>
  
  <p>And my _Layout.cshtml calls it like this:
  </p>
  
  <pre><code>&lt;head&gt;
     &lt;meta charset="utf-8" /&gt;
     &lt;meta name="viewport" content="width=device-width, initial-scale=1.0"&gt;
     &lt;title&gt;CD Renewal - @ViewBag.Title&lt;/title&gt;
     @Styles.Render("~/Content/css")
     @Scripts.Render("~/bundles/jquery")
     @Scripts.Render("~/bundles/jqueryval")
     @Scripts.Render("~/bundles/modernizr")
     @Scripts.Render("~/bundles/bootstrap")
  &lt;/head&gt;
  </code></pre>
  
  <p>Any idea on how I can make bundling pass the version param (v) in the body as a post and not a query string?</p>