CSRF Struts 1.3 saveToken/isTokenValid BACK BUTTON -
i using savetoken / istokenvalid in old struts application. have been able implement savetoken , istokenvalid attributes prevent csrf attack, if press button try submit same form hit error. possible in struts prevent csrf attack using these utilities allow ability go , resubmit form?
i on thinking csrf , resetting token on each page, means old tokens invalid. instead save token once , reset needs be.
Comments
Post a Comment