From 4e4174d89a40683425bebd57ae0327657a77a2fe Mon Sep 17 00:00:00 2001
From: 0xJacky <me@jackyu.cn>
Date: Mon, 27 Apr 2026 11:53:31 +0800
Subject: [PATCH] fix(backup): require secure session for restore

---
 api/backup/router.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/backup/router.go b/api/backup/router.go
index 4f105ff1..822e1bbc 100644
--- a/api/backup/router.go
+++ b/api/backup/router.go
@@ -7,7 +7,7 @@ import (
 
 func InitRouter(r *gin.RouterGroup) {
 	r.GET("/backup", middleware.AuthRequired(), CreateBackup)
-	r.POST("/restore", middleware.AuthRequired(), middleware.EncryptedForm(), RestoreBackup)
+	r.POST("/restore", middleware.AuthRequired(), middleware.RequireSecureSession(), middleware.EncryptedForm(), RestoreBackup)
 }
 
 func InitSetupRouter(r *gin.RouterGroup) {