diff --git a/src/wifi_manager.py b/src/wifi_manager.py
index d8b5cfa2..a385b7a1 100644
--- a/src/wifi_manager.py
+++ b/src/wifi_manager.py
@@ -694,7 +694,7 @@ class WiFiManager:
     # Helpers
     # ---------------------------------------------------------------------------
 
-    _IP_FORWARD_SAVE_PATH = Path("/tmp/ledmatrix_ip_forward_saved")
+    _IP_FORWARD_SAVE_PATH = Path("/tmp/ledmatrix_ip_forward_saved")  # nosec B108 - process-specific named file; device is single-user RPi
     # Written when AP mode is manually force-enabled; prevents daemon auto-disable
     _FORCE_AP_FLAG_PATH = Path("/tmp/ledmatrix_force_ap_active")  # nosec B108 - process-specific named file; device is single-user RPi
 
diff --git a/web_interface/blueprints/api_v3.py b/web_interface/blueprints/api_v3.py
index 5627313a..d434afc2 100644
--- a/web_interface/blueprints/api_v3.py
+++ b/web_interface/blueprints/api_v3.py
@@ -6680,7 +6680,8 @@ def enable_ap_mode():
         from src.wifi_manager import WiFiManager
 
         wifi_manager = WiFiManager()
-        force = bool((request.get_json(silent=True) or {}).get('force', False))
+        _force_raw = (request.get_json(silent=True) or {}).get('force', False)
+        force = _force_raw is True or (isinstance(_force_raw, str) and _force_raw.lower() in ('true', '1'))
         success, message = wifi_manager.enable_ap_mode(force=force)
 
         if success: