I want to validate user input to check for spoofed fields eg. a spoofing a value that was not in a select menu or a radio group etc. I'm thinking of doing this by:

Extending <html:form> to create a FormOptions object that represents the input names and options. It will also put a hidden formId field on the page. Extending <html:select>, <html:option>, <html:radio> to add to the FormOptions object Extend RequestProcessor or have a filter that uses the formId to look up the FormOptions object for the current POST and validate the request parameters against it.

Has anyone already solved this problem / have a different suggestion?

Cheers,
Lance.



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to