X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=cgi-auth-flexible.git;a=blobdiff_plain;f=cgi-auth-flexible.pm;h=f4e0d6830a370b473650e1bb53d54a028a2be526;hp=c9d97664d8cc1d6e0a92e8025bc1b16e774b36c0;hb=0908f788ba5fd88725dd9324fb4488748c391d7e;hpb=44b5d2d747513aec67f934f6de7c5d20f661468a diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm index c9d9766..f4e0d68 100644 --- a/cgi-auth-flexible.pm +++ b/cgi-auth-flexible.pm @@ -1294,22 +1294,25 @@ sub mutate_ok ($) { } our %_resource_get_needs_secret_hidden = - (map { $_ => 0 } qw(PAGE FRAME IFRAME SRCDUMP STYLESHEET FAVICON), + (map { $_ => 0 } qw(PAGE FRAME IFRAME SRCDUMP STYLESHEET FAVICON ROBOTS), map { $_ => 1 } qw(IMAGE SCRIPT AJAX-XML AJAX-JSON AJAX-OTHER)); -sub resource_get_needs_secret_hidden ($) { - my ($r, $nonpagetype) = @_; - my $ent = $_resource_get_needs_secret_hidden{$nonpagetype}; - die "unsupported nonpage GET type $nonpagetype" unless defined $ent; +die todo make so can add new ones; + +sub need_add_hidden ($$) { + my ($r, $method, $reqtype) = @_; + return 1 if $method ne 'GET'; + my $ent = $_resource_get_needs_secret_hidden{$reqtype}; + die "unsupported nonpage GET type $reqtype" unless defined $ent; return $ent; } sub check_nonpage ($$) { - my ($r, $nonpagetype) = @_; + my ($r, $reqtype) = @_; $r->_assert_checked(); return unless $r->resource_get_needs_secret_hidden($nonpagetype); return if $r->{ParmT}; - die "missing hidden secret parameter on nonpage GET $nonpagetype"; + die "missing hidden secret parameter on nonpage request $nonpagetype"; } #---------- output ----------