chore(refactor): broaden .gitignore for snapshot files + add .bak/.pre 404 guard middleware

a0688b433166ba56ec97e8f914b2901af2e6c91b · 2026-05-19 17:21:23 -0700 · Steve Abrams

- .gitignore now excludes *.bak, *.bak.*, *.pre-*, *.orig, *.rej, *~, .next/
  so accidental snapshot files never enter the tree.
- New Express middleware (before express.static) returns 404 for any path
  matching .bak / .pre- / .orig / .rej / trailing-tilde patterns, so even if
  a snapshot file slips into public/ it can't serve.

No behavior change for normal traffic.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M .gitignore
M server.js

Diff

commit a0688b433166ba56ec97e8f914b2901af2e6c91b
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 17:21:23 2026 -0700

    chore(refactor): broaden .gitignore for snapshot files + add .bak/.pre 404 guard middleware
    
    - .gitignore now excludes *.bak, *.bak.*, *.pre-*, *.orig, *.rej, *~, .next/
      so accidental snapshot files never enter the tree.
    - New Express middleware (before express.static) returns 404 for any path
      matching .bak / .pre- / .orig / .rej / trailing-tilde patterns, so even if
      a snapshot file slips into public/ it can't serve.
    
    No behavior change for normal traffic.
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .gitignore | 9 +++++++++
 server.js  | 8 ++++++++
 2 files changed, 17 insertions(+)

diff --git a/.gitignore b/.gitignore
index c34ccff..1977b5d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,5 +5,14 @@ tmp/
 .DS_Store
 dist/
 build/
+.next/
 data/*.db-shm
 data/*.db-wal
+
+# snapshot / backup files — never commit
+*.bak
+*.bak.*
+*.pre-*
+*.orig
+*.rej
+*~
diff --git a/server.js b/server.js
index 7cb36ef..daddf2d 100644
--- a/server.js
+++ b/server.js
@@ -15,6 +15,14 @@ app.use((req, res, next) => {
   next();
 });
 
+// Hard-block snapshot/backup file paths so accidental commits never serve.
+app.use((req, res, next) => {
+  if (/\.(bak|orig|rej)(\.|$)|\.pre-|~$/i.test(req.path)) {
+    return res.status(404).send('Not Found');
+  }
+  next();
+});
+
 app.use(express.static(path.join(__dirname, 'public')));
 
 // ─── Helper: build page HTML ─────────────────────────────────────────────────

← 92af6d6 snapshot — gitify backup 2026-05-19 · back to Abrams Report · Add per-site favicon (kills /favicon.ico 404) 5fc761c →