prevent client-side navigation to server routes - fixes #145

test/app/routes/blog/[slug].json.js

@@ -0,0 +1,23 @@
+import posts from './_posts.js';
+
+const lookup = {};
+posts.forEach(post => {
+	lookup[post.slug] = JSON.stringify(post);
+});
+
+export function get(req, res, next) {
+	// the `slug` parameter is available because this file
+	// is called [slug].js
+	const { slug } = req.params;
+
+	if (slug in lookup) {
+		res.set({
+			'Content-Type': 'application/json',
+			'Cache-Control': `no-cache`
+		});
+
+		res.end(lookup[slug]);
+	} else {
+		next();
+	}
+}