An application developer needs to prevent the Cross-site request forgery (CSRF) type of malicious attack. In order to do that, the application developer has enabled the cross-site request forgery…

An application developer needs to prevent the Cross-site request forgery (CSRF) type of malicious attack. In order to do that, the application developer has enabled the cross-site request forgery protection and modified the authentication JSP file to include the authToken URL parameter. To complete this customization, which property MUST an application developer define in the Struts configuration action for stores?