Hi, I have added a Howto on how to prevent client side changed to server side generated state (like t:formdata).
http://wiki.apache.org/tapestry/Tapestry5PreventClientSideChanges This is my approach on 'fixing' https://issues.apache.org/jira/browse/TAPESTRY-2482. I use a MarkupRendererFilter to insert a hidden field that contains the calculated HMAC (the checksum of the state). I was wondering whether this is the best approach? Or is there a better way to do this? Thanks, Martijn Brinkers --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
