vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule

592f31c0dd78345d95d966dbb01a43eca250c164 · 2026-06-01 16:12:29 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 592f31c0dd78345d95d966dbb01a43eca250c164
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jun 1 16:12:29 2026 -0700

    vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index aa902f6..6c19b47 100644
--- a/server.js
+++ b/server.js
@@ -6,6 +6,9 @@ const app = express();
 const PORT = process.env.PORT || 9898;
 
 app.use(express.json());
+// Vendor-redact: strip DW vendor names from /api/* responses (titles + vendor field).
+// Standing rule — DW vendor names NEVER appear in customer-facing UI. (Matches the fleet.)
+app.use(require('../_shared/api-vendor-redact'));
 
 // Guard: never serve backup / snapshot artifacts from static root,
 // even if one accidentally lands in public/.

← fa2ef35 fleet rebuild: dw-header (hamburgers UL + centered name) + u · back to Fabricfriday · gitignore: add missing standard excludes (.next/) c82dba1 →