lib/roda/plugins/route_csrf.rb in roda-3.65.0 vs lib/roda/plugins/route_csrf.rb in roda-3.66.0

@@ -88,10 +88,10 @@
     # csrf_field :: The field name to use for the hidden tag containing the CSRF token.
     # csrf_path(action) :: This takes an argument that would be the value of the HTML form's
     #                      action attribute, and returns a path you can pass to csrf_token
     #                      that should be valid for the form submission.  The argument should
     #                      either be nil or a string representing a relative path, absolute
-    #                      path, or full URL.
+    #                      path, or full URL (using appropriate URL encoding).
     # csrf_tag(path=nil, method='POST') :: An HTML hidden input tag string containing the CSRF token, suitable
     #                                      for placing in an HTML form.  Takes the same arguments as csrf_token.
     # csrf_token(path=nil, method='POST') :: The value of the csrf token, in case it needs to be accessed
     #                                        directly.  It is recommended to call this method with a
     #                                        path, which will create a request-specific token.  Calling