Questions tagged [hdiv]

HDIV (HTTP Data Integrity Validator) is an opensource Web Application Security Framework for a java web applications.

82 questions
0
votes
1 answer

HDiv redirecting to error page Error[HDIV_PARAMETER_DOES_NOT_EXIST]

Running Struts 1.3.8 hdiv-config.xml
Junzy
  • 1
  • 3
0
votes
1 answer

A new session getting created after every request in Jboss once a session is invalidated

I have observed that once the session is invalidated due to session timeout, then a new session id is created after every request due to which login page is redirected for every operation. My application is running on internet and intranet, facing…
0
votes
2 answers

HDIV + Spring Security 4: HDIV_PARAMETER_DOES_NOT_EXIST

I have a Spring 4 MVC + Security application that runs perfectly. I am trying to integrate HDIV with it and have been through the documentation and the showcase example: https://github.com/hdiv/hdiv-spring-mvc-showcase/ When I use…
0
votes
1 answer

HDIV cipher tag not working

I'm trying to cipher a parameter using HDIV's cipher tag. I have tried the example from the following page https://github.com/hdiv/hdiv/wiki/05.-HDIV-Tag-Libraries#5113-tag-cipher. According to the documentation
Stefan
  • 1,096
  • 8
  • 10
0
votes
0 answers

hdiv step by step implementation in strut2

I need to implement the HDIV concept. I have a page having input fields , which on tampering data is editable. The steps i found are not understandable. I am using simple struts2 framework.
messa2703
  • 1
  • 6
0
votes
1 answer

HDIV : ajax call for uploading file not working

We are using HDIV to protect our web application from the csrf attacks. Recently we try to upload file (multipart) using ajax call but it seems not working. the form file param is null in the form. Plus, we have the follwing message: Unable to find…
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

HDIV : skipping parameters validation

Is there any way to skip request parameters validation in HDIV framework ? We have many pages in our application with so many parameters and we can't declare all of them as startParameters. Thanks for your help
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
0 answers

HDIV : I'm getting a NullPointerException when accessing a page

I'm in the last step before releasing the new version of an application which is using HDIV security framework. currently I'm getting NullPointerException when accessing this application through the login page. The weird thing is that I never had…
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

HDIV : not redirecting to errorpage when HDIV_PARAMETER_NOT_EXISTS

I am trying to implement HDIV with an application using struts 1.3.8. I have added the dependencies in pom file and listener, filter in web.xml file. The token _HDIV_STATE_ is injected in every page, link.. So to test if it is working as expected…
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

HDIV : option tag error

Currently, I'm integrating the last version of HDIV library in an application using struts 1. It seems to be working well. However, in some pages, where I use the select tag, I get the following error: java.lang.NoSuchFieldError: filter at…
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

Using HDIV with struts 1.2.9

Our application is using struts 1.2.9 and we would like to integrate HDIV (HTTP Data Integrity Validator) in order to enhance its security. However, it seems that the last version of HDIV (2.1.12) is only compatible with struts 1.3.8. Currently, we…
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

HDIV : looking for HDIV tld

Where I can download the HDIV tld (hdiv-html.tld, hdiv-html-el.tld, hdiv-logic.tld..) for Struts 1? The documentation say to replace Struts tld (struts-html.tld, struts-logic.tld..) by HDIV tld in the web.xml Thanks
kkung
  • 715
  • 4
  • 10
  • 18
0
votes
1 answer

Adding HDIV State ID to POST request body while making AJAX calls

We have a Java based web application where we use HDIV as our security framework. Fundamentally our app does not have any form tags, rather we have many AJAX calls which brings JSON/HTML response with which the cards in the pages are constructed. We…
Sai
  • 1,790
  • 5
  • 29
  • 51
0
votes
2 answers

HDIV INVALID_PARAMETER_NAME error with Spring Tag form

I am using a Spring Tag form element in which there are 3 parameters.
Happy_coding
  • 19
  • 1
  • 5
0
votes
1 answer

HDIV config to set parameters in hidden fields instead of URL

I am using Spring MVC 4.1.7.RELEASE and HDIV 2.1.11. I have set HdivRequestDataValueProcessor to intercept internal redirects in Controller code as below. return "redirect:"+"/user/account" This is resulting in the HDIV state parameter getting set…
Happy_coding
  • 19
  • 1
  • 5