Let's make auto routes disable

Why? I really like using it.
Is it because of the JavaScript?

No. JavaScript does not matter.

Auto routing is very dangerous, because it is very difficult to know all routes for human beings.
That is some unexpected routes to developers are automatically created and it may cause vulnerability.

In my experience, around 80% of Login/Auth tutorial articles have vulnerability that can bypass login.

---

I don't propose to remove the auto routing feature.
I just recommend to disable it, and propose to make it disabled by default.

If a user want to use it, enable it and use it with caution.

I just happen to be working on a login system at the moment myself. I have auto routing on right now. It would be nice to know specifically how one might bypass the login because of a routing feature so that I can keep it on and make sure nobody can bypass it. I don't have the best mind for trying to hack things.

I understand you recommend turning it off as a solution but in my opinion, it shouldn't be a feature at all if it can't be used in a secure manner.

I'm not here to hijack the conversation if it's still ongoing. I'm just trying to get the proper information. I'll probably just turn it off now but I don't understand why other than phantom routing of some sort.