Protect POST /txs bulk query-by-txid endpoint

mempool · Aug 28, 2023 · d3509c4 · d3509c4
1 parent 17f60a9
commit d3509c4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/rest.rs b/src/rest.rs
@@ -1019,7 +1019,7 @@ fn handle_request(
                 json_response(tx.remove(0), ttl)
             }
         }
-        (&Method::POST, Some(&"txs"), None, None, None, None) => {
+        (&Method::POST, Some(&INTERNAL_PREFIX), Some(&"txs"), None, None, None) => {
             let txid_strings: Vec<String> =
                 serde_json::from_slice(&body).map_err(|err| HttpError::from(err.to_string()))?;