security: strip hardcoded dw_admin DSN password -> env-first (.mjs straggler). No rotation/deploy.

81abdbca575a17930dd0c6e47fbbc14c3b8dd525 · 2026-05-30 10:00:33 -0700 · Steve

Files touched

M scripts/search-kqed.mjs

Diff

commit 81abdbca575a17930dd0c6e47fbbc14c3b8dd525
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 10:00:33 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first (.mjs straggler). No rotation/deploy.
---
 scripts/search-kqed.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/search-kqed.mjs b/scripts/search-kqed.mjs
index 003365a..4dd2895 100644
--- a/scripts/search-kqed.mjs
+++ b/scripts/search-kqed.mjs
@@ -13,7 +13,7 @@ const MAILBOX_EMAIL = 'natalia@studentdebtcrisis.org';
 async function main() {
   // 1. Get tokens from DB
   const pool = new pg.Pool({
-    connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/sdcc',
+    connectionString: 'postgresql://dw_admin@127.0.0.1:5432/sdcc',
   });
 
   const { rows } = await pool.query(

← bde9449 security: strip hardcoded dw_admin DSN password -> env-first · back to Norma · fix: add rel=noopener noreferrer to 32 target=_blank links i eb3fcd7 →