title: HTTP URL Parameter Security for UrlFetchApp.fetch()
body: <p>I have (1) a Google Sheets spreadsheet with a bound Google Apps script that uses <a href="https://developers.google.com/apps-script/reference/url-fetch/url-fetch-app" rel="nofollow noreferrer">UrlFetchApp.fetch()</a> to make requests to (2) my own Google Apps Script web application (implemented using <a href="https://developers.google.com/apps-script/guides/web" rel="nofollow noreferrer">doGet()</a>).</p>
  
  <p>When I am making a request, I am adding HTTP parameters with sensitive information, for example:</p>
  
  <p><a href="https://script.google.com/macros/s/D83jfe2F543wj5s6U4Ws4I/exec" rel="nofollow noreferrer">https://script.google.com/macros/s/D83jfe2F543wj5s6U4Ws4I/exec</a>?<strong>firstname</strong>=John&amp;<strong>lastname</strong>=Smith&amp;<strong>email</strong>=johnsmith@hotmail.com&amp;<strong>SSN</strong>=123456789</p>
  
  <p>Q: Is adding sensitive parameters like this safe from a security standpoint? It is HTTPS, so as far as I am aware, the URL should be encrypted end-to-end.</p>
  
  <hr>
  
  <p>NOTE: One might argue that someone could have infected the user's computer with a virus to see which URLs the user visits, but I just ran this test to find out where GAS requests originate from, and they do not even originate from the user's computer, but rather from Google Servers in Mountain View (so it seems that everything is happening "behind the scenes" in a secure manner?):</p>
  
  <pre><code>function findMyIP() {
    var url = "https://www.iplocation.net/find-ip-address"; // IP finder website
    var response = UrlFetchApp.fetch(url); // Execute a GET request from GAS to that website
    SpreadsheetApp.getUi().showModelessDialog(HtmlService.createHtmlOutput(response.getContentText()), 'Website Display');
  }
  </code></pre>
  
  <hr>
  
  <p>EDIT - PICTURE FOR CLARIFICATION FOR A FUTURE READER (credit to Sandy Good's answer):</p>
  
  <p><a href="https://i.stack.imgur.com/CyjFf.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/CyjFf.png" alt="enter image description here"></a></p>