struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: [s1] Question about Tokens
Date Wed, 31 Oct 2007 14:45:35 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dave,

Dave Newton wrote:
> I always put my reset before any long-running work, although I tend 
> to disable the submit button via JavaScript anyway.

Thanks, Dave. Is there an elegant solution for this at all? Since
javascriptcannot be relied upon, I don't think the token architecture in
S1 can protect against double-submits. (right?)

If you reset before doing the work, you'll lose the token. Actually, is
that a problem? If there's some kind of error, the form ought to be
re-displayed, in which case you'd get a new token. Do I have that right?

Thanks,
- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHKJUP9CaO5/Lv0PARAukzAJ9/PqKbjEGh1Ytq9rscVKWQAVkLuwCeNVge
CQm9f4Axl+pNhTYdureff4g=
=KMnV
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Mime
View raw message