wire api-vendor-redact middleware (close vendors-facet leak)

0ceefe7bda985e38e2263f96b31bf28dff567c4e · 2026-05-26 07:19:42 -0700 · Steve

Files touched

M server.js

Diff

commit 0ceefe7bda985e38e2263f96b31bf28dff567c4e
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 07:19:42 2026 -0700

    wire api-vendor-redact middleware (close vendors-facet leak)
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index 83eab6e..638d9fe 100644
--- a/server.js
+++ b/server.js
@@ -137,6 +137,10 @@ function sortProducts(list, mode) {
 
 
 app.use(express.json({ limit: "256kb" }));
+
+// Fleet-wide DW vendor-name redactor on /api/* (drops `vendors` facet, replaces
+// any `vendor` field with "Designer Wallcoverings", strips `?vendor=` query).
+app.use(require('../_shared/api-vendor-redact'));
 // Site config — prefer _shared/site-config (canonical) but fall back to an
 // inline minimal loader so this server.js is self-contained on Kamatera.
 let cfg;

← abd5831 snapshot before refactor pass · back to Agedwallpaper · rails: editorial labels for firing aesthetic buckets b8aad98 →