在JSF中，防止表单篡改的最佳方法是什么？(In JSF, What is the best way to prevent Form tampering?)

 我们正在使用JSF 1.x打开服务器端状态保存。 我们遇到一个问题，即作为web-bot实施的恶意用户可以提交页面，而不提交预期在表单中的所有字段。 这导致一些未被调用的验证器应被调用，等等。 
 
 我们希望阻止用户在表单中添加/删除字段并提交表单（如果他们想要提交表单，那么所有预期字段都在那里）。 在过去，我使用页面上字段ID的MD5哈希加上在页面上保存为隐藏字段的未知短语和会话过滤器，根据提交的字段ID生成预期哈希并将其与隐藏字段中的值。 
 
 有没有什么我可以用JSF开箱即用，以防止用户操纵表单？ 或者使用第三方库？ 

We are using JSF 1.x with server-side state saving turned on. We have an issue where a malicious user, implemented as a web-bot, can submit a page w/o submitting all fields that are expected to be in the form. This results in some validators not being called that should be called, etc. 
 
We would like to prevent users from being able to add/remove fields from a form and submitting the form (if they want to submit a form all expected fields most be there). In the past I have done this using an MD5 hash of the field ids on the page plus an unknown phrase saved as a hidden field on the page and a session filter that generates an expected hash given the field ids that were submitted and compares it against the value in the hidden field. 
 
Is there anything I can do out of the box with JSF to prevent the user from manipulating a form? Or with a third-party library? 

原文：https://stackoverflow.com/questions/2178237