wire api-vendor-redact middleware (close vendor leak in /api/products)

575a927374cff165707ab8f55dbbdeabc4911106 · 2026-05-26 07:41:12 -0700 · Steve

Files touched

M server.js

Diff

commit 575a927374cff165707ab8f55dbbdeabc4911106
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 07:41:12 2026 -0700

    wire api-vendor-redact middleware (close vendor leak in /api/products)
---
 server.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/server.js b/server.js
index 3db2c0e..87a6b4f 100644
--- a/server.js
+++ b/server.js
@@ -126,6 +126,11 @@ app.use((req, res, next) => {
   if (/\.(bak|orig)(\.|$)|\.pre-|~$/i.test(req.path)) return res.status(404).send('Not found');
   next();
 });
+
+// Fleet-wide DW vendor-name redactor on /api/* (drops `vendors` facet, replaces
+// any `vendor` field with "Designer Wallcoverings", strips `?vendor=` query).
+app.use(require('../_shared/api-vendor-redact'));
+
 app.use(express.static(path.join(__dirname, 'public')));
 
 app.get('/api/products', (req, res) => {

← df435be remove vendor name render from public product cards · back to Bleachresistantfabrics · sku-redact: wire shared vendor-id display scrubber 0db0612 →