wire api-vendor-redact middleware FIRST in app.use chain — strips vendor field + vendors facet + ?vendor= from all /api/* responses

5ac690b64a020a07e9af1bce391d52bd31e2d666 · 2026-05-25 21:14:41 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 5ac690b64a020a07e9af1bce391d52bd31e2d666
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon May 25 21:14:41 2026 -0700

    wire api-vendor-redact middleware FIRST in app.use chain — strips vendor field + vendors facet + ?vendor= from all /api/* responses
---
 server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server.js b/server.js
index f2953c0..4291ea1 100644
--- a/server.js
+++ b/server.js
@@ -137,6 +137,7 @@ function sortProducts(list, mode) {
 }
 
 
+app.use(require('../_shared/api-vendor-redact'));
 app.use(helmet({ contentSecurityPolicy: false }));
 app.use(express.json({ limit: '256kb' }));
 // Universal contact module — modals, /api/send-inquiry, /api/send-sample, /zd-loader.js

← fb65b1e retag aesthetic from PG: 230 rows updated · back to Linenwallpaper · fix /api/facets total — reflect filtered (niche) list count, bda38a4 →