From 75948b9fb979f583115488d18707f4d82bd7e896 Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Sat, 25 Jul 2026 06:25:57 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 src/Hono.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/Hono.js b/src/Hono.js
index c6a9ce69..cc79016d 100644
--- a/src/Hono.js
+++ b/src/Hono.js
@@ -12,6 +12,9 @@ export default new Hono()
         let $response;
         // ({ $request, $response } = await Request($request, KV));
         $request = await HonoWorkerAdapter.buildRequest(c.req);
+        if (new URL($request.url).hostname !== "weatherkit.apple.com") {
+            return c.body("Forbidden", 403);
+        }
         $response = await fetch($request);
         $response = await Response($request, $response);
         return HonoWorkerAdapter.writeResponse(c, $response);