From 0b260fe835067805ebda60e4792acd2bcee02b30 Mon Sep 17 00:00:00 2001
From: Cohee <18619528+Cohee1207@users.noreply.github.com>
Date: Wed, 21 May 2025 23:25:01 +0300
Subject: [PATCH] Only allow POST requests to ping endpoint

---
 src/server-main.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/server-main.js b/src/server-main.js
index 153c1e94a..90168f10d 100644
--- a/src/server-main.js
+++ b/src/server-main.js
@@ -231,7 +231,7 @@ app.use('/api/users', usersPublicRouter);
 
 // Everything below this line requires authentication
 app.use(requireLoginMiddleware);
-app.use('/api/ping', (request, response) => {
+app.post('/api/ping', (request, response) => {
     if (request.query.extend && request.session) {
         request.session.touch = Date.now();
     }