wire api-vendor-redact middleware (close vendors-facet leak)

b888491cef85e2169c81e7cbb687d28a9401cd45 · 2026-05-26 07:19:42 -0700 · Steve

Files touched

M server.js

Diff

commit b888491cef85e2169c81e7cbb687d28a9401cd45
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 07:19:42 2026 -0700

    wire api-vendor-redact middleware (close vendors-facet leak)
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index 0093df3..43b8bc2 100644
--- a/server.js
+++ b/server.js
@@ -138,6 +138,10 @@ function sortProducts(list, mode) {
 
 app.use(express.json({ limit: "256kb" }));
 
+// Fleet-wide DW vendor-name redactor on /api/* (drops `vendors` facet, replaces
+// any `vendor` field with "Designer Wallcoverings", strips `?vendor=` query).
+app.use(require('../_shared/api-vendor-redact'));
+
 // Never serve editor/refactor snapshot files from the static root.
 app.use((req, res, next) => {
   if (/\.(bak|orig)(\.|$)|\.pre-|~$/i.test(req.path)) return res.status(404).send('Not found');

← 30e30e1 retag aesthetic from PG: 23 rows updated · back to 1950swallpaper · homepage: render 4 tag-bucket rails (mid-century modern/geom e436837 →