Hi, I have a stateless, bookmarkable page with a simple stateless login form. This form contains two required fields: username and password. Below there are steps to reproduce my problem: 1. Enter the login page url=http://localhost/app/login 2. Fill the password field with eg. "ppp" and leave the username field blank 3. Press a "Login" button to submit this form - this causes a post and redirect to a new instance of login page, where the error message is displayed ("Field username is required"). url=http://localhost/app/login/wicket:interface/:13:mainContent:1:loginForm::IFormSubmitListener::/ 4. Both fields are empty now, because a password field was cleared by default (and it is ok). 5. Press a "Login" button to submit form again - now there are two error messages (because both fields are empty now) url=http://localhost/app/login/wicket:interface/:14:mainContent:1:loginForm::IFormSubmitListener::/password/ppp/
The problem is that after the first submit "/password/ppp" url fragment is appended to the form's action attribute. So the second post causes this parameter appears in the url. In general all form fields can be appended in this way, when you submit a form twice. Is it a correct behavior that these parameters are added to url (and to page parameters)? Should I deal with them manually: setup the default form fields' values based on these parameters? How to prevent from displaying them in url (especially "password" fields - because it is not very secure to show these values in url). -- Daniel --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
