title: Prevent Cross-Site Request Forgery in a Spring WebFlow Application
body: <p>I'm looking for a (hopefully straightforward) way to add <a href="http://www.codinghorror.com/blog/2008/10/preventing-csrf-and-xsrf-attacks.html" rel="nofollow noreferrer">CSRF</a> protection to an application build on Spring WebFlow 2.</p>
  
  <p>An approach that migrates well to Spring WebFlow 3 (when released) is preferred.</p>