Re: Potential Security Flaw in Struts MVC

[Jim Richards]

At 11:53 PM 30/05/01 -0700, you wrote:
>A good way of removing the bucketloads :-} from your Action classes is to
>subclass ActionServlet and implement processActionPerform to do the logon
>check.

It's not just for login though, that was the example I used, every action that
generates a form needs to do this. Mostly it is checking against URL
hacking.



--
Kumera - a new Open Source Content Management System
for small to medium web sites written in Perl and using XML
http://www.cyber4.org/kumera/index.html