wire api-vendor-redact middleware (close vendor leak in /api/products)

f338d3490c10ea1c9f46b6a64d5731180af1aea6 · 2026-05-26 07:41:11 -0700 · Steve

Files touched

M server.js

Diff

commit f338d3490c10ea1c9f46b6a64d5731180af1aea6
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 07:41:11 2026 -0700

    wire api-vendor-redact middleware (close vendor leak in /api/products)
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index 4ee06bd..ee0fbec 100644
--- a/server.js
+++ b/server.js
@@ -176,6 +176,10 @@ app.use((req, res, next) => {
   next();
 });
 
+// Fleet-wide DW vendor-name redactor on /api/* (drops `vendors` facet, replaces
+// any `vendor` field with "Designer Wallcoverings", strips `?vendor=` query).
+app.use(require('../_shared/api-vendor-redact'));
+
 app.use(express.static(path.join(__dirname, 'public')));
 
 // ── HTML helpers ─────────────────────────────────────────────────────────────

← ff4542f fix: drop dead 'Raffia' nav links — 0 products tagged raffia · back to Carmelwallpapers · scrub vendor name leaks from products.json source (568 produ 607c2d8 →