From d3509c4845a6670921874b06f0dca6dec13fa341 Mon Sep 17 00:00:00 2001
From: Mononaut <github@monospace.live>
Date: Wed, 16 Aug 2023 18:05:19 +0900
Subject: [PATCH] Protect POST /txs bulk query-by-txid endpoint

---
 src/rest.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rest.rs b/src/rest.rs
index 367f8d90..d1ca54df 100644
--- a/src/rest.rs
+++ b/src/rest.rs
@@ -1019,7 +1019,7 @@ fn handle_request(
                 json_response(tx.remove(0), ttl)
             }
         }
-        (&Method::POST, Some(&"txs"), None, None, None, None) => {
+        (&Method::POST, Some(&INTERNAL_PREFIX), Some(&"txs"), None, None, None) => {
             let txid_strings: Vec<String> =
                 serde_json::from_slice(&body).map_err(|err| HttpError::from(err.to_string()))?;