tags:

views:

41

answers:

1
Q: 

What kind of informations show when validation of AntiForgeryToken fails?

I have public site with some forms.

Simple question:
What kind of informations should I show when validation of AntiForgeryToken fails?

Is it should be 404 (page not found), error or just ignore it and redirect to the home page?

A: 

You should return an appropriate status code. 404 means that the requested resource is not found which is not the case with anti forgery token validation failure.

403 Forbidden seems like a reasonable status code to return in this case. It means that the server understood the request but refused to fulfill it.

Darin Dimitrov  2010-03-01 16:42:49
You suggest to create special page (403) with additional informations about this situation?
dario-g  2010-03-01 23:03:59

related questions

What's the best way to implement field validation using ASP.NET MVC?
How do I handle page flow in MVC (particularly asp.net)
Entity diagrams in ASP.NET MVC
How do I get rid of Home in ASP.Net MVC?
Can I generate ASP.NET MVC routes from a Sitemap?
ASP.NET Model-view-controller (MVC) - where do I start from?
user controls and asp.net mvc
ASP.Net MVC route mapping
RSS Feeds in ASP.NET MVC
Open Source Licensing Options for ASP.NET MVC Application?
Does the OutputCacheFilter in the Microsoft MVC Preview 4 actually save on action invocations?
MVC Learning Resources
Validating posted form data in the ASP.NET MVC framework
Best mock framework that can do both WebForms and MVC?
Use the routing engine for form submissions in ASP.NET MVC Preview 4
How do you get a custom id to render using HtmlHelper in MVC
MVC Preview 4 - No route in the route table matches the supplied values.
Is there a way to include a fragment identifier when using Asp.Net MVC ActionLink, RedirectToAction, etc. ?
In ASP.NET MVC I encounter an incorrect type error when rendering a user control with the correct typed object
ASP.NET MVC - Is it worth it yet?
Multiple languages in an ASP.NET MVC application?
Is it better to create Model classes, or just stick with generic database utility class?
ASP.NET MVC Without Visual Studio
ASP.NET MVC "CRUD" Database Sample
How to RedirectToAction in ASP.NET MVC without losing request data