Re: Feedback on the ping="" attribute (ISSUE-1)

2007/11/8, Julian Reschke:
> >
> > Not only possible, but commonly done.  And not even on purpose.
>
> How can it be not on purpose. It's not trivial to hide a POST behind a
> text link.

Oh yes it is: just choose a commandLink instead of a commandButton if
you're doing JSF, or a LinkButton instead of a Button if you're doing
ASP.NET.

http://java.sun.com/javaee/javaserverfaces/1.2_MR1/docs/tlddocs/h/commandLink.html
http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.linkbutton.aspx

> Let's educate web designers not to do that.

Let's first educate framework vendors: the above classes are most
probably used "not on prupose", but they *exist* on purpose.

-- 
Thomas Broyer