title: How to safely include password in query string
body: <p>Is it possible to safely include a password in a query string for a c# asp.net site. </p>
  
  <p>Few assumptions and things I know -  </p>
  
  <ol>
  <li>The site does not and will not have links/images/javascript/analytics to/from other sites. So no referrer links to worry about. </li>
  <li>ALL communication with the web browser will be over https.</li>
  <li>I know that the query string will remain in the history of the
  computer.</li>
  <li>More than just the password/username is needed to login. So simply
  pasting the url back into the browser will not result in a login.</li>
  </ol>
  
  <p>I know the site may be susceptible to cross site scripting and replay attacks. How do I mitigate these?  </p>
  
  <p>Given the above scenario, how should I include a password in a query string? </p>
  
  <p>Please don't ask me 'why', I know this is not a good idea, but it is what the client wants.</p>