security: strip hardcoded dw_admin DSN password -> env-first (.mjs straggler). No rotation/deploy.

de055dc052f1c770270c145fdb579aff8491c4b5 · 2026-05-30 10:00:33 -0700 · Steve

Files touched

M scripts/search-kqed.mjs

Diff

commit de055dc052f1c770270c145fdb579aff8491c4b5
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 10:00:33 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first (.mjs straggler). No rotation/deploy.
---
 scripts/search-kqed.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/search-kqed.mjs b/scripts/search-kqed.mjs
index 003365a..4dd2895 100644
--- a/scripts/search-kqed.mjs
+++ b/scripts/search-kqed.mjs
@@ -13,7 +13,7 @@ const MAILBOX_EMAIL = 'natalia@studentdebtcrisis.org';
 async function main() {
   // 1. Get tokens from DB
   const pool = new pg.Pool({
-    connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/sdcc',
+    connectionString: 'postgresql://dw_admin@127.0.0.1:5432/sdcc',
   });
 
   const { rows } = await pool.query(

← 351dc6f security: strip hardcoded dw_admin DSN password -> env-first · back to Norma Platform · fix: add rel=noopener noreferrer to 32 target=_blank links i d1e1e9f →