Hi,

Someone or something (bot) posted a form with modified data, presumably to post 
something that would otherwise not go through.
But as Tapestry validates the posted values with a predefined HMAC and it 
doesnt match you get this error.

Maybe look at ur access log to see who or what is doing this ?

Antal

---- OriginalMessage ----
>From: "George Christman" <gchrist...@cardaddy.com>
>To: "Tapestry users" <users@tapestry.apache.org>
>Sent: Tue, Nov 18, 2014, 14:58
>Subject: HMAC Tampered with error
>
>Hi guys, I'm seeing this exception come across more often lately. I guess I
>don't fully understand what it means or how to produce it. Could someone
>tell me how to produce this exception so that I can figure out how to fix
>it?
>
>mozilla/5.0 (iphone; cpu iphone os 8_1 like mac os x) applewebkit/600.1.4
>(khtml, like gecko) version/8.0 mobile/12b411 safari/600.1.4
>org.apache.tapestry5.ioc.internal.OperationException: java.io.IOException:
>Client data associated with the current request appears to have been
>tampered with (the HMAC signature does not match).
>
>95 more Caused by: java.lang.RuntimeException: java.io.IOException: Client
>data associated with the current request appears to have been tampered with
>(the HMAC signature does not match). at
>org.apache.tapestry5.internal.services.ClientDataEncoderImpl.decodeClientData(ClientDataEncoderImpl.java:115)
>at $ClientDataEncoder_1193acae4d.decodeClientData(Unknown Source) at
>org.apache.tapestry5.corelib.components.Form.executeStoredActions(Form.java:720)
>... 99 more Caused by: java.io.IOException: Client data associated with the
>current request appears to have been tampered with (the HMAC signature does
>not match). at
>org.apache.tapestry5.internal.services.ClientDataEncoderImpl.validateHMAC(ClientDataEncoderImpl.java:131)
>at
>org.apache.tapestry5.internal.services.ClientDataEncoderImpl.decodeClientData(ClientDataEncoderImpl.java:104)
>... 101 more
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to