diff --git a/lib/http-worker.js b/lib/http-worker.js
index eb5a0dd74..fb9bc2f24 100644
--- a/lib/http-worker.js
+++ b/lib/http-worker.js
@@ -777,7 +777,10 @@ app.get('/api/logo', function (req, res) {
     });
 });
 
-app.post('/upload-blob', Express.json({limit:"500kb"}), (req, res) => {
+app.use('/upload-blob', Express.json({limit:"500kb"}), (req, res) => {
+    if (req.method !== "POST") {
+        return res.status(403).send();
+    }
     const { chunk, sig, edPublic } = req.body;
     if (!cpcrypto) {
         return void res.status(500).send({error: 'NOCRYPTO'});