How it works
Use it when the redirect is temporary and method preservation matters; verify the final destination.
Example
Example: A POST request can temporarily move to another handler using the same method.
Common mistakes
Do not redirect sensitive requests to an untrusted destination.
How can you check this in practice?
Check Location and whether the client preserves the method at the temporary destination. This matters for POST because it should not become GET. Test with safe data and never redirect sensitive payloads to an unverified external destination.
Distinctions and limitations
307 is temporary and preserves the method; 308 is permanent with the same guarantee. The choice should not be based on SEO alone: how a client resubmits the request matters.
Official sources
Editorial responsibility: Martin Zhelyazkov · Founder of Z-Consult
Updated: 05/11/2026
For a correction or question: office@z-consult.bg