Validation method must not be called by event handler

[masooh]

In Stripes Actions every public method which returns a resolution can be called. This is never intended, sometimes dangerous, but possible for validation methods.

@UrlBinding("/")
public class SomeAction extends ActionBean {

   @DefaultHandler
   public Resolution view() {
      return new RedirectResolution("/target.htm");
   }

   @ValidationMethod
   public Resolution validate() {
      return null;
   }
}

You could call http://localhost/?validate and then trigger the validate method twice. Once in custom validation lifecycle and once in event handler lifecycle.