R
- The Result
type.Action
.@Deprecated public interface Action<R extends Result> extends IsSerializable
Dispatch
. It has a specific result
type which is returned if the action is successful. Your implementation
should override getServiceName()
to return a default service url. If
you use a SecurityCookie
to prevent XSRF attacks and you want this
action to be secured against such attacks (i.e. it's not meant to be an
anonymous action) then you should override isSecured()
to return
true
.
You can usually inherit from ActionImpl
or
UnsecuredActionImpl
instead.Modifier and Type | Field and Description |
---|---|
static String |
DEFAULT_SERVICE_NAME
Deprecated.
The URL of the service used by default.
|
Modifier and Type | Method and Description |
---|---|
String |
getServiceName()
Deprecated.
Access the name of the service, which will be used as the URL path to
access the action.
|
boolean |
isSecured()
Deprecated.
Verifies if the action is secured.
|
static final String DEFAULT_SERVICE_NAME
String getServiceName()
boolean isSecured()
SecurityCookie
to
foil XSRF attacks.
Important! Make sure your method returns a value that does not
depend on client-side information, otherwise it could be tampered with to
turn a secure action into an insecure one. An example of a bad practice
would be to store a boolean secured
member and return that. Since
this field is serialized, the user could change it on his side. A simple
and good practice is simply to return true;
or
return false;
.true
if the action should be secured against XSRF attacks,
false
otherwise.Copyright © 2010–2014 Arcbees. All rights reserved.