fix(auth): possible path escape

Darkness4 · Jan 27, 2024 · 6e11131 · 6e11131
1 parent 90d5d3d
commit 6e11131
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/main.go b/main.go
@@ -241,7 +241,10 @@ var app = &cli.App{
 				http.Error(w, err.Error(), http.StatusInternalServerError)
 			}
 		}
-		r.With(jwt.Deny).Get("/counter", renderFn)
+		r.Route("/counter", func(r chi.Router) {
+			r.Use(jwt.Deny)
+			r.Get("/", renderFn)
+		})
 		r.Get("/*", renderFn)
 		r.Handle("/static/*", http.FileServer(http.FS(static)))