From b11796f6636764ff1f844e5e3c7b3dcc9ba43b4a Mon Sep 17 00:00:00 2001
From: OniriCorpe <oniricorpe@disroot.org>
Date: Wed, 17 Jan 2024 01:30:55 +0100
Subject: [PATCH] restrict upload api following the main url

---
 manifest.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manifest.toml b/manifest.toml
index 5d95cc8..854ee75 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -52,6 +52,7 @@ ram.runtime = "50M"
 
     [resources.permissions]
     main.url = "/"
+    main.additional_urls = "/api/upload"
     api.url = "/api"
     api.allowed = "visitors"
     api.auth_header = false