From c00485c5906217e12477bc4788253eba195fa71f Mon Sep 17 00:00:00 2001
From: KozakLordOfMatrix <matrixneo2026@tutamail.com>
Date: Sat, 13 Jun 2026 22:15:27 +0300
Subject: [PATCH] fix: return 400 for malformed JSON in dashboard API

---
 src/server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/server.js b/src/server.js
index 4caa602..aa74832 100644
--- a/src/server.js
+++ b/src/server.js
@@ -212,6 +212,7 @@ async function route(req, res) {
     if (method === 'POST' || method === 'PUT' || method === 'PATCH') {
       try { body = JSON.parse(await readBody(req)); } catch (err) {
         if (sendBodyTooLargeIfNeeded(res, err, 'dashboard')) return;
+        return json(res, 400, { ok: false, error: 'Invalid JSON' });
       }
     }
     const subpath = path.slice('/dashboard/api'.length);