Framework to avoid Cross-Site Request Forgery (CSRF) attacks on JSF portlet
Hi,
I have tried to integrate HDIV (http://hdiv.org) framework with JSF1.2 portlet application in order to mitigate the risk of Cross-Site Request Forgery(CSRF) attacks. and it looks like HDIV framework doesn't support portlet specification.
Is there any other proven framework that can be used to integrate with JSF1.2 portlet application running on Weblogic portal sever.