Questions tagged [hdiv]

HDIV (HTTP Data Integrity Validator) is an opensource Web Application Security Framework for a java web applications.

82 questions
0
votes
1 answer

HDIV issue while redirecting in Spring MVC Controller

I have inherited some Java Spring MVC code that does internal redirects in the Controller on a form submission Ex: Form is submitted to /login_submit       (POST request) On success, it is redirected inside controller :- ..... return…
Happy_coding
  • 19
  • 1
  • 5
0
votes
1 answer

HDIV -- INVALID_EDITABLE_VALUE

I have a Spring Web application integrated with HDIV for security. I've changed some of the functionality, which is now working as expected, however I get some of these errors in the log: 14:34:51,595 INFO [org.hdiv.logs.Logger]…
martoncsukas
  • 2,077
  • 20
  • 23
0
votes
1 answer

Issue in form submit with the Integration of HDIV and Spring MVC

I integrated HDIV and Spring MVC. Now I need to submit a form to the server. The problem is I need to give the submit button a name like "btnSave" or "btnSubmit". So that I can make request mapping like this @RequestMapping(value = "/user", params =…
Alex
  • 617
  • 2
  • 9
  • 21
0
votes
1 answer

HDIV changable hidden field

I have a hidden field in my page which is manipulated by javascript. HDIV doesn't like it, and gives a invalid parameter value. How can I configure HDIV to understand that the javascript might change the value, and avoid the unauthorized access…
Arash
  • 11,697
  • 14
  • 54
  • 81
0
votes
1 answer

cannot find the Tag library for HDIV 2.1.11

I am trying to integrate HDIV 2.1.11 i my application. Everything looks good except that I cannot find the taglib files. Where can I download the tag library definitions?
Arash
  • 11,697
  • 14
  • 54
  • 81
0
votes
1 answer

HDIV: Spring MVC application getting "Unauthorized access" error

Just implemented the configuration samples from the HDIV spring MVC show case project into my web application and configured the start links, etc and I can see the HDIV state parameter in the URL. I have configured the index.jsp to redirect to the…
Biswajit
  • 27
  • 5
0
votes
1 answer

HDIV Use Case: Integration with Third Party Site posting to HDIV secured site

I wanted to know in a specific use case like below will the HDIV protection work for a spring mvc application and if yes how - Use Case 1 - Third party website posting to HDIV protected site (without login autentication);flow is like this - Third…
Biswajit
  • 27
  • 5
0
votes
0 answers

HDIV and Spring MVC - After startPage

In HDIV, after I've configured my startpage, where should I define the other address that are allowed after it? PS: I have already configured the user flow in spring. I'm using the last Spring MVC.
user1416264
  • 13
  • 1
  • 2
0
votes
0 answers

HDIV error in forEach inside form select

I'm having trouble trying to implement form:select in HDIV. Here's my code in the JSP which renders the selector and options:
Vic Cebedo
  • 169
  • 1
  • 2
  • 7
0
votes
1 answer

HDIV + Spring tag library (form) = Error, possible bug?

I'm finding troubles using HDIV with the tag Spring element: "< form:form >". First, I'm going to explain the architecture of my application: I'm using Spring framework 4.1.6, Spring Security 4.0.0 and HDIV 2.1.10. So far I'm not having errors…
4LB3R70
  • 11
  • 5
0
votes
1 answer

HDIV INVALID_CONFIDENTIAL_VALUE on POST with Parameters

I have the following code in my JSP:
Vic Cebedo
  • 169
  • 1
  • 2
  • 7
0
votes
1 answer

Implementing HDIV on a Login Page

I'm implementing HDIV in Spring MVC and I have trouble in the Login Page. Since HDIV would require the use of the form tag (like: ), my app would throw an exception because I…
Vic Cebedo
  • 169
  • 1
  • 2
  • 7
0
votes
1 answer

HDIV does not exclude params from validation

I am using HDIV 2.1.9 with spring and I have the following config Under /secured/content/ URL i have a lot of pages…
0
votes
1 answer

CSRF token was not automatically added as hidden parameter

Trying a sample application integrating HDIV with Spring Security CSRF and facing a problem - CSRF token is not automatically added as hidden parameter to the generated form. The configuration in Spring security-config.xml
Naveen
  • 41
  • 1
  • 3
0
votes
1 answer

HDIV Performance

Currently I am evaluating HDIV. Its a great tool to implement various levels of security. But currently I need to check its performance. ie after implementation of HDIV, what is the load time of my subsequent pages with _HDIV_STATE appended to the…