woah, just had a crazy idea!
The root of all evil with the FlashScoped is that fact that we use cookies for
transporting the requestToken, right?
With HTML5 browsers we could also just add the reqeustToken to the GET request
and use the html5 history API to cleanup the URL later.
Should work,
Sounds reasonable.
At least it is possible with HTML5 to do the following:
1) URL: index.xhtml?requestId=xyz
2) HTML5: change to index.xhtml without reloading (see [1])
Regards,
Jakob
[1]
http://spoiledmilk.dk/blog/html5-changing-the-browser-url-without-refreshing-page
2011/11/20 Mark
