redact vendor names from customer-facing /api (close fleet leak)

bd45b5de62f651fee3e6230f59830b6ccd7df88d · 2026-05-26 09:45:03 -0700 · Steve

Files touched

M server.js

Diff

commit bd45b5de62f651fee3e6230f59830b6ccd7df88d
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 09:45:03 2026 -0700

    redact vendor names from customer-facing /api (close fleet leak)
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index dfcd6d9..ebffa9c 100644
--- a/server.js
+++ b/server.js
@@ -210,6 +210,9 @@ app.use((req, res, next) => {
   next();
 });
 
+// Fleet-wide DW vendor-name redactor on /api/* (drops vendors facet, replaces vendor field).
+app.use(require('../_shared/api-vendor-redact'));
+
 app.use(express.static(path.join(__dirname, 'public')));
 app.set('views', path.join(__dirname, 'views'));
 app.set('view engine', 'ejs');

← 3e1bbcd homepage rails: motif rail sections + pills strip wired to / · back to Chinoiseriewallpaper · sku-redact: wire shared vendor-id display scrubber d89307d →