title: Using struts 1 CSRF protection on links
body: <p>I'm looking at stopping CSRF, and while Struts 1 has saveToken, isTokenValid, and resetToken which work nicely for forms they do not seem to work for links. By this I mean links such as <code>www.mysite.com/action/doSomething?id=123</code></p>
  
  <p>Is there a way to use this functionality to stop CSRF with these links? Unfortunately upgrading Struts is not an option.</p>