From cc5587319b411fc6896f18c8d174d6034f4ee5e5 Mon Sep 17 00:00:00 2001
From: Julian Hurst <julian.hurst@digdash.com>
Date: Thu, 23 Jan 2025 12:12:59 +0100
Subject: Make upload endpoint static

---
 main.go              | 4 ++++
 templates/index.html | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/main.go b/main.go
index 949d2f3..3e2cd86 100644
--- a/main.go
+++ b/main.go
@@ -69,6 +69,10 @@ func (handler BoxHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		}
 		w.WriteHeader(http.StatusNoContent)
 	case http.MethodPost:
+		if r.URL.Path != "/upload" {
+			w.WriteHeader(http.StatusBadRequest)
+			return
+		}
 		token := r.Header.Get("X-Upload-Token")
 		if token != handler.token {
 			log.Println("unauthorized")
diff --git a/templates/index.html b/templates/index.html
index c487165..9264991 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -36,7 +36,7 @@
 						resourceId = xhr.getResponseHeader("X-Resource-ID");
 					}
 				}
-				xhr.open("POST", "/" + f.name, true);
+				xhr.open("POST", "/upload", true);
 				xhr.setRequestHeader("X-Upload-Token", token)
 				xhr.send(f)
 			}
-- 
cgit v1.2.3