From d9ae84310d7705af66c13fed085253fac5471028 Mon Sep 17 00:00:00 2001
From: Valentin Lab <valentin.lab@kalysto.org>
Date: Sat, 13 Dec 2025 22:02:46 +0100
Subject: [PATCH] fix: avoid sharing route to JSON data to offers

No paths leads there, and there are no reason to keep this route.
---
 routes/Shop/Offers.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/routes/Shop/Offers.php b/routes/Shop/Offers.php
index 764529f7..adbc64b6 100644
--- a/routes/Shop/Offers.php
+++ b/routes/Shop/Offers.php
@@ -1,5 +1,8 @@
 <?php
 
 Route::prefix('Offres')->name('Offers.')->group(function () {
-    Route::get('show/{id}', 'OfferController@show')->name('show');
+    // Public offer pages are not exposed; keep the route returning 404 to avoid leaking data.
+    Route::get('show/{id}', function () {
+        abort(404);
+    })->name('show');
 });