From 7e1e2aabf82e5e5ba1838ee2ddb6a771d0e83fb7 Mon Sep 17 00:00:00 2001
From: Linus Rath <139418639+rathlinus@users.noreply.github.com>
Date: Mon, 19 Oct 2026 01:44:29 +0200
Subject: [PATCH] test: use a sidecar path instead of the now-denied translate
 route in the plugin POST test

---
 lib/__tests__/plugin-http-post-denied-paths.test.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/__tests__/plugin-http-post-denied-paths.test.ts b/lib/__tests__/plugin-http-post-denied-paths.test.ts
index b9d9cadda..38faa20e3 100644
--- a/lib/__tests__/plugin-http-post-denied-paths.test.ts
+++ b/lib/__tests__/plugin-http-post-denied-paths.test.ts
@@ -61,7 +61,9 @@ describe('plugin http.post denied paths', () => {
   });
 
   it('still reaches a plugin sidecar route', async () => {
-    await dispatchApiCall(plugin(['/api/translate']), 'http.post', ['/api/translate', { text: 'hi' }]);
+    // /api/translate used to be the example here; it is a third-party relay
+    // with the user's cookies and is denied now like the other app routes.
+    await dispatchApiCall(plugin(['/api/my-plugin/translate']), 'http.post', ['/api/my-plugin/translate', { text: 'hi' }]);
     expect(fetchSpy).toHaveBeenCalledTimes(1);
   });