minor improvements and a todo, prompted by docs work

[cgi-auth-flexible.git] / cgi-auth-flexible.pm

diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index c9d97664d8cc1d6e0a92e8025bc1b16e774b36c0..f4e0d6830a370b473650e1bb53d54a028a2be526 100644 (file)
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -1294,22 +1294,25 @@ sub mutate_ok ($) {
 }
 
 our %_resource_get_needs_secret_hidden =
-    (map { $_ => 0 } qw(PAGE FRAME IFRAME SRCDUMP STYLESHEET FAVICON),
+    (map { $_ => 0 } qw(PAGE FRAME IFRAME SRCDUMP STYLESHEET FAVICON ROBOTS),
      map { $_ => 1 } qw(IMAGE SCRIPT AJAX-XML AJAX-JSON AJAX-OTHER));
 
-sub resource_get_needs_secret_hidden ($) {
-    my ($r, $nonpagetype) = @_;
-    my $ent = $_resource_get_needs_secret_hidden{$nonpagetype};
-    die "unsupported nonpage GET type $nonpagetype" unless defined $ent;
+die todo make so can add new ones;
+
+sub need_add_hidden ($$) {
+    my ($r, $method, $reqtype) = @_;
+    return 1 if $method ne 'GET';
+    my $ent = $_resource_get_needs_secret_hidden{$reqtype};
+    die "unsupported nonpage GET type $reqtype" unless defined $ent;
     return $ent;
 }
 
 sub check_nonpage ($$) {
-    my ($r, $nonpagetype) = @_;
+    my ($r, $reqtype) = @_;
     $r->_assert_checked();
     return unless $r->resource_get_needs_secret_hidden($nonpagetype);
     return if $r->{ParmT};
-    die "missing hidden secret parameter on nonpage GET $nonpagetype";
+    die "missing hidden secret parameter on nonpage request $nonpagetype";
 }
 
 #---------- output ----------