* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2006-09-22 00:15]: > > The problem, which I can reproduce in FF by hitting escape > > between submits, is that the first request completes as > > normal (and would return a "Transaction Completed!" response > > page) but, then the second request (which is what the browser > > is now following) sees that the transaction is no longer > > valid and returns and error page. > > But why are you returning an error page, doesn't the fact that > the token no longer is valid mean that the form has already > been submitted (return a oops this form has already been > submitted page)?
Because he can’t distinguish between “no longer valid” and “has never been valid,” I assume. If invalidated tokens were marked as used up but kept around for a while, then it would be possible. Regards, -- Aristotle Pagaltzis // <http://plasmasturm.org/> _______________________________________________ List: [email protected] Listinfo: http://lists.rawmode.org/mailman/listinfo/catalyst Searchable archive: http://www.mail-archive.com/[email protected]/ Dev site: http://dev.catalyst.perl.org/
