adamp 5074f3d9ef Return proper 404s for unmatched API routes and static files ...

Add a /api catch-all that returns 404 JSON for unmatched API routes.
In the SPA fallback, only serve index.html for navigation requests
(no file extension) — requests for non-existent static files now
get a real 404 instead of index.html with 200.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-10 00:29:10 -06:00

..

middleware

Fix critical security vulnerabilities and data integrity issues

2026-02-09 18:04:24 -06:00

routes

Add security headers via helmet and improve rate limiting

2026-02-09 22:06:55 -06:00

db.js

Fix bugs, harden validation, and improve robustness

2026-02-09 21:35:53 -06:00

index.js

Return proper 404s for unmatched API routes and static files

2026-02-10 00:29:10 -06:00

utils.js

Fix bugs, harden validation, and improve robustness

2026-02-09 21:35:53 -06:00