CSRF protection example in a ModelGlue-based ColdFusion app, part 2

modelGlue.xml

<event-types>

    <event-type name="permitted">
        <before>
            <broadcasts>
                <message name="checkAuthorization" />
                <message name="secureTransmissionURL" />
            </broadcasts>
            <results>
                ...<!--Whatever you do if user is not authenticated yet-->
            </results>
        </before>
    </event-type>

    <event-type name="validateTransmission">
        <before>
            <broadcasts>
                <message name="validateTransmissionURL" />
            </broadcasts>
            <results>
                <result name="invalidTransmission" append="validationProblem" do="invalidTransmission" redirect="true" />
            </results>
        </before>
    </event-type>

</event-types>