security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.

55eb229a1f6e48c0c180555b788e3422a5fc69e0 · 2026-05-30 09:32:50 -0700 · steve

Files touched

M scrape_dg_specs.js

Diff

commit 55eb229a1f6e48c0c180555b788e3422a5fc69e0
Author: steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:32:50 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.
---
 scrape_dg_specs.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scrape_dg_specs.js b/scrape_dg_specs.js
index 7fc6b7e..ef85ffc 100644
--- a/scrape_dg_specs.js
+++ b/scrape_dg_specs.js
@@ -9,7 +9,7 @@
 const https = require('https');
 const { Pool } = require('pg');
 
-const pool = new Pool({ connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified' });
+const pool = new Pool({ connectionString: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified') });
 
 function sleep(ms) { return new Promise(r => setTimeout(r, ms)); }

← cecf2c3 letsbegin: shared cost-tracker helper + hook 7 Gemini routes · back to Letsbegin · Add last-20-day Full Monty backfill runner (1003 items, meta a780b03 →