CaptchaAssetController
Corex\Captcha\CaptchaAssetController · class · Add-ons layer
Loads the provider’s client only when the current page actually contains a protected form. Flow blocks render during the_content, which runs after wp_enqueue_scripts, so the decision of whether any protected form exists is only knowable at footer time. This controller reads what the page’s forms declared: the forms plugin’s registry, when that plugin is active, and {@see CaptchaChallenge}, which the account, newsletter and a site’s own forms print through (spec 115). Nothing declared ⇒ nothing enqueued, so a page with no protected form makes zero requests to the provider (FR-001). Only the public site key reaches the browser; the secret never leaves the server (FR-005).