This solution is rather crude, however, closely resembling the use of hidden form fields to pass along values between requests.
然而，这种解决方案有些简陋，很像使用隐藏的表单字段在请求之间传递值。
Storing session state in the client using HTTP cookies or hidden form fields has significant security risks — it exposes a part of your application internals to the untrusted client layer.
在客户端用HTTP cookie或者隐藏表单字段存储会话状态有很大的安全风险——它将应用程序的一部分内部内容暴露给了非受信任的客户层。
This rule extracts all the hidden form fields from an HTML page and stores them in the context so a subsequent request can use the hidden form field values.
此规则从HTML页面提取所有隐藏的窗体字段并将它们存储在上下文中，因此后面的请求可以使用隐藏的窗体字段值。
应用推荐