add 404-guard middleware for bak/orig/rej/swp/pre-/tilde paths

247e6e16cb9398cfafe4dadf43ef101e747888a7 · 2026-05-19 18:44:22 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 247e6e16cb9398cfafe4dadf43ef101e747888a7
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 18:44:22 2026 -0700

    add 404-guard middleware for bak/orig/rej/swp/pre-/tilde paths
---
 server.js | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/server.js b/server.js
index 4c66362..2eb6ad5 100644
--- a/server.js
+++ b/server.js
@@ -17,6 +17,15 @@ const upload = multer({ storage: multer.memoryStorage(), limits: { fileSize: 10
 
 app.use(cors());
 app.use(express.json());
+
+// 404-guard: block requests to backup / editor / patch artifacts (standing rule)
+app.use((req, res, next) => {
+  if (/\.(bak|orig|rej|swp|swo)(\.|$)|\.pre-|~$/i.test(req.path)) {
+    return res.status(404).send('Not Found');
+  }
+  next();
+});
+
 app.use(express.static(path.join(__dirname, 'public')));
 app.set('view engine', 'ejs');
 app.set('views', path.join(__dirname, 'views'));

← 1e400d7 broaden .gitignore: bak/pre/orig/rej/swp/tilde junk patterns · back to Handbag Authentication · add rel=noopener noreferrer to target=_blank links 48074cf →