fix(security): cover privileged API root routes

2026-08-18 00:17:17 +02:00 · 2026-08-17 01:09:53 -06:00
parent 930753d846
commit 21df433103
1 changed files with 2 additions and 0 deletions
@@ -46,7 +46,9 @@ function isPrivilegedApiPath(pathname: string): boolean {
    path === '/api/ais/feed' ||
    path === '/api/mesh/infonet/ingest' ||
    path === '/api/mesh/meshtastic/send' ||
+    path === '/api/wormhole' ||
    path.startsWith('/api/wormhole/') ||
+    path === '/api/settings' ||
    path.startsWith('/api/settings/') ||
    path.startsWith('/api/ai/') ||
    path === '/api/ai' ||