File Coverage

blib/lib/Plack/Middleware/RefererCheck.pm

Criterion	Covered	Total	%
statement	20	20	100.0
branch	9	10	90.0
condition	2	3	66.6
subroutine	7	7	100.0
pod	2	2	100.0
total	40	42	95.2

package Plack::Middleware::RefererCheck;

use strict;
use 5.008_001;
use parent qw(Plack::Middleware);

__PACKAGE__->mk_accessors(qw(host same_scheme error_app no_warn));

our $VERSION = '0.03';

sub prepare_app {
    my $self = shift;

    warn('Plack::Middleware::RefererCheck WAS DEPRECATED!') unless $self->no_warn;
}

sub call {
    my($self, $env) = @_;

    $self->_check($env) ? $self->app->($env) : $self->error_app ? $self->error_app->($env) : _default_error_app();
}

sub _check {
    my ( $self, $env ) = @_;

    return 1 if $env->{REQUEST_METHOD} ne 'POST';

    my $scheme = $self->same_scheme ? qr{\Q$env->{'psgi.url_scheme'}\E} : qr{https?};
    my $host = $self->host || $env->{HTTP_HOST};
        $host = qr{\Q$host\E};

    return $env->{HTTP_REFERER} =~ m{\A$scheme://$host(?:/|\Z)};
}

sub _default_error_app {
    return ['403', ['Content-Type' => 'text/plain', 'Content-Length' => 9], ['Forbidden']];
}

1;

__END__