Re: [OS-webwork] how about returning invalid.token result only when the token tag is used

2003-09-20 Thread Matt Ho
Jason Carreira wrote: I believe the change Matt made to the TokenInterceptor to make the validToken() method return what the Javadoc said it should will make this possible (this is in CVS HEAD). I think :-) I still need to go in and fix the TokenInterceptorTest to pass (bad Matt ;-)) so don't hold

RE: [OS-webwork] how about returning invalid.token result only when the token tag is used

2003-09-19 Thread Jason Carreira
I believe the change Matt made to the TokenInterceptor to make the validToken() method return what the Javadoc said it should will make this possible (this is in CVS HEAD). I think :-) I still need to go in and fix the TokenInterceptorTest to pass (bad Matt ;-)) so don't hold me to anything I've

Re: [OS-webwork] how about returning invalid.token result only when the token tag is used

2003-09-19 Thread Francisco Hernandez
on second thought about this is better to leave as is if not someone could hack the page to not use the token and resubmit it multiple times Jason Carreira wrote: I believe the change Matt made to the TokenInterceptor to make the validToken() method return what the Javadoc said it should will