-
Improvement
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
MBS-3686 was caused by a user clicking the submit button multiple times and causing the form submission to occur be processed more than once. While I can't reproduce the problem now, this isn't a great answer. Instead, we should guarantee that form submissions occur with at-most-once semantics. One solution could be to generate a unique token on form request and require it be present on form submission, with an atomic get-and-delete routine.