Hi, what's the current status of implementation of synchronizer token in myfaces core? There is a specification issue planned for 2.1 [1].
Furthermore, if user wants to block HTML/DOM entirely what can he/she use? I know trinidad solution only and it has special javascript method pprInstallBlockingHandlers [2] which automaticaly blocks all DOM elements during AJAX request/response and if user uses tr:commandButton blocking="true" then it blocks DOM during normal sumbit too. I would be nice have something similiar in core (as myfaces extension). Thanks, Martin Kočí [1] https://javaserverfaces-spec-public.dev.java.net/issues/show_bug.cgi?id=559 [2] https://svn.apache.org/repos/asf/myfaces/trinidad/trunk/trinidad-impl/src/main/javascript/META-INF/adf/jsLibs/Core.js