[
https://issues.apache.org/jira/browse/WICKET-4107?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13127670#comment-13127670
]
Martin Grigorov commented on WICKET-4107:
-----------------------------------------
The form submits with POST by default but it is not possible to copy/paste the
URL and send it to another person in this case.
Read about 'redirect after post' pattern.
> StatelessForm resubmitting via GET
> ----------------------------------
>
> Key: WICKET-4107
> URL: https://issues.apache.org/jira/browse/WICKET-4107
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 1.4.18, 1.5.0, 1.5.1
> Reporter: Chris Hansen
> Assignee: Martin Grigorov
>
> After a StatelessForm is submitted, the user is redirected to a new URI. If
> the user does an HTTP GET to this same URI, the form is resubmitted with all
> blank values (see examples below). This seems to happen regardless of the
> RenderStrategy being used or the form's method (i.e. POST), and it happens in
> recent versions of 1.4.x as well as 1.5.x.
> To demonstrate the behavior, visit either of the following links. The
> validation failure indicates that the form has been submitted just by
> visiting the URI (i.e. HTTP GET).
> http://wicketstuff.org/wicket14/stateless/?wicket:bookmarkablePage=:org.apache.wicket.examples.stateless.StatelessPage&wicket:interface=:0:statelessform::IFormSubmitListener::
> http://wicketstuff.org/wicket/stateless/foo?0-1.IFormSubmitListener-statelessform
> This behavior could be triggered when:
> * a user submits a StatelessForm and saves a bookmark to the generated URI.
> * a user submits a StatelessForm and shares a link to the generated URI via
> email or other means.
> * a user submits a StatelessForm, lets their session expire, then takes any
> action requiring login when using wicket-auth-roles. (They are redirected
> back to the generated URI after login.)
> * after submitting a StatelessForm, a user clicks in their address bar and
> hits enter.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
