Before the widespread adoption of frameworks with built‑in request parsers, many developers manually extracted parameters from URLs using indexOf . For example:
They leave them as traps.
Security‑conscious applications sometimes scan log strings for the word "password" to redact sensitive data before writing to disk.