diff --git a/internal/web/crossorigin_test.go b/internal/web/crossorigin_test.go
index 0d5e915..b75d832 100644
--- a/internal/web/crossorigin_test.go
+++ b/internal/web/crossorigin_test.go
@@ -113,6 +113,7 @@ func TestCrossOrigin_AForeignPostIsRefusedOnEachListedStateChangingPath(t *testi
 		"/v/abc/summarize",
 		"/v/abc/retry-now",
 		"/v/abc/chat",
+		"/uploads/00000000-0000-0000-0000-000000000000/delete",
 	}
 	for _, path := range routes {
 		t.Run(path, func(t *testing.T) {