redact vendor names from customer-facing /api (close fleet leak)

36416e53e0f0219d333a6757d84a48ff6239f94b · 2026-05-26 09:45:03 -0700 · Steve

Files touched

M server.js

Diff

commit 36416e53e0f0219d333a6757d84a48ff6239f94b
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 09:45:03 2026 -0700

    redact vendor names from customer-facing /api (close fleet leak)
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index 4acf837..95aeb79 100644
--- a/server.js
+++ b/server.js
@@ -73,6 +73,9 @@ try {
 require("./_universal-contact")(app, cfg.contact);
 require("./_universal-auth")(app, cfg.auth);
 app.locals.siteConfig = cfg;
+// Fleet-wide DW vendor-name redactor on /api/* (drops vendors facet, replaces vendor field).
+app.use(require('../_shared/api-vendor-redact'));
+
 app.use(express.static(path.join(__dirname, 'public')));
 
 function sortProducts(list, sort) {

← da1fc9a add: clean-URL routes for /history /vocabulary /sourcing /ca · back to Blockprintedwallpaper · scrub vendor name leaks from products.json source (1 product bd154b5 →