HDIV (HTTP Data Integrity Validator) is an opensource Web Application Security Framework for a java web applications.
Questions tagged [hdiv]
82 questions
0
votes
1 answer
HDiv redirecting to error page Error[HDIV_PARAMETER_DOES_NOT_EXIST]
Running Struts 1.3.8
hdiv-config.xml
…

Junzy
- 1
- 3
0
votes
1 answer
A new session getting created after every request in Jboss once a session is invalidated
I have observed that once the session is invalidated due to session timeout, then a new session id is created after every request due to which login page is redirected for every operation. My application is running on internet and intranet, facing…

Mohsin Murtuza
- 3
- 2
0
votes
2 answers
HDIV + Spring Security 4: HDIV_PARAMETER_DOES_NOT_EXIST
I have a Spring 4 MVC + Security application that runs perfectly.
I am trying to integrate HDIV with it and have been through the documentation and the showcase example: https://github.com/hdiv/hdiv-spring-mvc-showcase/
When I use…

jumpthebus
- 1
- 3
0
votes
1 answer
HDIV cipher tag not working
I'm trying to cipher a parameter using HDIV's cipher tag. I have tried the example from the following page https://github.com/hdiv/hdiv/wiki/05.-HDIV-Tag-Libraries#5113-tag-cipher.
According to the documentation

Stefan
- 1,096
- 8
- 10
0
votes
0 answers
hdiv step by step implementation in strut2
I need to implement the HDIV concept. I have a page having input fields , which on tampering data is editable. The steps i found are not understandable.
I am using simple struts2 framework.

messa2703
- 1
- 6
0
votes
1 answer
HDIV : ajax call for uploading file not working
We are using HDIV to protect our web application from the csrf attacks.
Recently we try to upload file (multipart) using ajax call but it seems not working.
the form file param is null in the form.
Plus, we have the follwing message:
Unable to find…

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
HDIV : skipping parameters validation
Is there any way to skip request parameters validation in HDIV framework ?
We have many pages in our application with so many parameters and we can't declare all of them as startParameters.
Thanks for your help

kkung
- 715
- 4
- 10
- 18
0
votes
0 answers
HDIV : I'm getting a NullPointerException when accessing a page
I'm in the last step before releasing the new version of an application which is using HDIV security framework.
currently I'm getting NullPointerException when accessing this application through the login page. The weird thing is that I never had…

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
HDIV : not redirecting to errorpage when HDIV_PARAMETER_NOT_EXISTS
I am trying to implement HDIV with an application using struts 1.3.8.
I have added the dependencies in pom file and listener, filter in web.xml file.
The token _HDIV_STATE_ is injected in every page, link..
So to test if it is working as expected…

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
HDIV : option tag error
Currently, I'm integrating the last version of HDIV library in an application using struts 1.
It seems to be working well. However, in some pages, where I use the select tag, I get the following error:
java.lang.NoSuchFieldError: filter at…

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
Using HDIV with struts 1.2.9
Our application is using struts 1.2.9 and we would like to integrate HDIV (HTTP Data Integrity Validator) in order to enhance its security.
However, it seems that the last version of HDIV (2.1.12) is only compatible with struts 1.3.8.
Currently, we…

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
HDIV : looking for HDIV tld
Where I can download the HDIV tld (hdiv-html.tld, hdiv-html-el.tld, hdiv-logic.tld..) for Struts 1?
The documentation say to replace Struts tld (struts-html.tld, struts-logic.tld..) by HDIV tld in the web.xml
Thanks

kkung
- 715
- 4
- 10
- 18
0
votes
1 answer
Adding HDIV State ID to POST request body while making AJAX calls
We have a Java based web application where we use HDIV as our security framework. Fundamentally our app does not have any form tags, rather we have many AJAX calls which brings JSON/HTML response with which the cards in the pages are constructed.
We…

Sai
- 1,790
- 5
- 29
- 51
0
votes
2 answers
HDIV INVALID_PARAMETER_NAME error with Spring Tag form
I am using a Spring Tag form element in which there are 3 parameters.

Happy_coding
- 19
- 1
- 5
0
votes
1 answer
HDIV config to set parameters in hidden fields instead of URL
I am using Spring MVC 4.1.7.RELEASE and HDIV 2.1.11. I have set HdivRequestDataValueProcessor to intercept internal redirects in Controller code as below.
return "redirect:"+"/user/account"
This is resulting in the HDIV state parameter getting set…

Happy_coding
- 19
- 1
- 5