[
https://issues.apache.org/struts/browse/STR-1609?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Paul Benedict updated STR-1609:
-------------------------------
Fix Version/s: (was: Future)
1.4.0
> Extend TokenProcessor to handle a list of transaction tokens
> ------------------------------------------------------------
>
> Key: STR-1609
> URL: https://issues.apache.org/struts/browse/STR-1609
> Project: Struts 1
> Issue Type: Improvement
> Components: Core
> Affects Versions: 1.1.0
> Environment: Operating System: All
> Platform: All
> Reporter: Art Snowdon
> Priority: Minor
> Fix For: 1.4.0
>
> Attachments: MultipleTokensPatch.txt
>
>
> The TokenProcessor currently supports a single token per user session. This
> can
> be used to guarantee that a user will only submit a form once. However, since
> only one token is supported, a user can not have multiple browser windows open
> and submit forms from all of them. Only the most recent form would have a
> valid
> token.
> This enhancement suggests supporting a list (say 20) of tokens so the user
> could
> have a fair number of browser windows open and all would have a valid token.
> A suggested patch is available.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
