Anti-forgery token issue after logout and browser back button

Hi Guys,

i have a silly issue, here. Eagerly waiting for your help.

Login and go to customer info page. Logout and click the browser back button. Then u'll see the customer info page. Resubmit again. you'll get the YSOD anti-forgery token issue.

What's the best way to solve it?
Removing cache after logout? Will cache removal slow down the Application?
Or is there a way of providing a 404 error page type, a custom page with an error message?

Expert comments are awaited.

Regards,
Shyam

Hi,

Why are you clicking back after logged out?

Error is right. You logged out then also you are going to submit form which is checking and throwing you are not authorized.

Thanks,
Jatin

Hi Jatin,

You can't say to client why are you clicking back. They don't want the YSOD. Client is asking to give some generic error message.

Regards,
Shyam

shyamyumnam wrote:

User should never see a YSOD - be sure to update your customErrors node in your web.config!