From 21df43310381c875fe5f1e73c71bd51d025404ec Mon Sep 17 00:00:00 2001
From: Shadowbroker <43977454+BigBodyCobain@users.noreply.github.com>
Date: Mon, 17 Aug 2026 01:09:53 -0600
Subject: [PATCH] fix(security): cover privileged API root routes

---
 frontend/src/proxy.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/frontend/src/proxy.ts b/frontend/src/proxy.ts
index b04154a..4ed167e 100644
--- a/frontend/src/proxy.ts
+++ b/frontend/src/proxy.ts
@@ -46,7 +46,9 @@ function isPrivilegedApiPath(pathname: string): boolean {
     path === '/api/ais/feed' ||
     path === '/api/mesh/infonet/ingest' ||
     path === '/api/mesh/meshtastic/send' ||
+    path === '/api/wormhole' ||
     path.startsWith('/api/wormhole/') ||
+    path === '/api/settings' ||
     path.startsWith('/api/settings/') ||
     path.startsWith('/api/ai/') ||
     path === '/api/ai' ||