+our %_resource_get_needs_secret_hidden =
+ (map { $_ => 0 } qw(PAGE FRAME IFRAME SRCDUMP STYLESHEET FAVICON),
+ map { $_ => 1 } qw(IMAGE SCRIPT AJAX-XML AJAX-JSON AJAX-OTHER));
+
+sub resource_get_needs_secret_hidden ($) {
+ my ($r, $nonpagetype) = @_;
+ my $ent = $_resource_get_needs_secret_hidden{$nonpagetype};
+ die "unsupported nonpage GET type $nonpagetype" unless defined $ent;
+ return $ent;
+}
+
+sub check_nonpage ($$) {
+ my ($r, $nonpagetype) = @_;
+ $r->_assert_checked();
+ return unless $r->resource_get_needs_secret_hidden($nonpagetype);
+ return if $r->{ParmT};
+ die "missing hidden secret parameter on nonpage GET $nonpagetype";
+}
+