From deepbit: Miner starts a request to long polling URL with GET method and same basic authorization as on main connection.
It does not specify whether there is a body. I should note, that I do not use a body, and it works fine, with every pool I've seen. If it does expect a body, it is a contradictory spec, as you said.