wire api-vendor-redact middleware (close vendors-facet leak)

d6a6c08d2190f80df801d9b63786be108688fc54 · 2026-05-26 07:19:42 -0700 · Steve

Files touched

M server.js

Diff

commit d6a6c08d2190f80df801d9b63786be108688fc54
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 07:19:42 2026 -0700

    wire api-vendor-redact middleware (close vendors-facet leak)
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index 207404b..48bb8bd 100644
--- a/server.js
+++ b/server.js
@@ -137,6 +137,10 @@ function sortProducts(list, mode) {
 
 
 app.use(express.json({ limit: "256kb" }));
+
+// Fleet-wide DW vendor-name redactor on /api/* (drops `vendors` facet, replaces
+// any `vendor` field with "Designer Wallcoverings", strips `?vendor=` query).
+app.use(require('../_shared/api-vendor-redact'));
 // Site config — prefer _shared/site-config (canonical) but fall back to an
 // inline minimal loader so this server.js is self-contained on Kamatera.
 let cfg;

← d70c8be chore: add noreferrer to Facebook external link · back to Architecturalwallcoverings · rails: editorial labels for firing aesthetic buckets 9ec45eb →