Re: Token Session Interceptor and back button

Hi, Thank for the replies but when I was trying your solution I encounter another situation. I am using tiles to create my web pages and when I put your code on the main template it works perfectly but when I put on the tiles attribute page do not work. Works like this: But does not work like t

Token Session Interceptor and back button

Hi, I am using the token session interceptor for a form and I have this situation: 1) I am in the form page; 2) I leave the form page; 3) Go back to the form page by the "back" button; 4) Submit the form; And of course the form is not submitted and the token returns "invalid.token" but do not add

Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

Hi, I have the same question. I have one form with two submit tags and if setting the constant 'struts.mapper.action.prefix.enabled' can bring security issues what is the possible solution? Thanks, André Gomes -- View this message in context: http://struts.1045723.n5.nabble.com/security-im