redact vendor names from customer-facing /api (close fleet leak)

1f3cea8e6363615b5bfeb75fc3c7869d1e4219cd · 2026-05-26 09:45:04 -0700 · Steve

Files touched

M server.js

Diff

commit 1f3cea8e6363615b5bfeb75fc3c7869d1e4219cd
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 26 09:45:04 2026 -0700

    redact vendor names from customer-facing /api (close fleet leak)
---
 server.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server.js b/server.js
index 9b8affd..4857e91 100644
--- a/server.js
+++ b/server.js
@@ -21,6 +21,8 @@ async function getProducts() {
         WHERE image IS NOT NULL
         ORDER BY title
     `);
+    // DW vendor-name redaction: never expose real supplier names in customer-facing API.
+    for (const r of rows) r.vendor = 'Designer Wallcoverings';
     productsCache = rows;
     productsCacheAt = now;
     return rows;

← 950ca66 add: pre-stage Meta Pixel snippet (placeholder; flip via _dw · back to Flockedwallpaper · flocked: fix inert sort+density controls — defer wiring to D 6228a2f →