UPDATE : GWT 2.3 introduces a better mechanism to fight XSRF attacks. See http://code.google.com/webtoolkit/doc/latest/DevGuideSecurityRpcXsrf.html
GWT 2.3 introduces a better mechanism to fight XSRF attacks. See GWT RPC XSRF protection