security: strip hardcoded secret -> env-first/passwordless. No rotation/deploy.

6fbee23910e7a9591d9d941017d3c9ceba21c3bd · 2026-06-22 09:24:10 -0700 · Steve

Files touched

M scripts/import.js

Diff

commit 6fbee23910e7a9591d9d941017d3c9ceba21c3bd
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon Jun 22 09:24:10 2026 -0700

    security: strip hardcoded secret -> env-first/passwordless. No rotation/deploy.
---
 scripts/import.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/import.js b/scripts/import.js
index 2cd14ed..e79c358 100644
--- a/scripts/import.js
+++ b/scripts/import.js
@@ -27,7 +27,7 @@ const SQFT_PER_M2 = 10.7639;
 const PG = {
   host: process.env.PGHOST || '127.0.0.1',
   user: process.env.PGUSER || 'dw_admin',
-  password: process.env.PGPASSWORD || 'DW2024SecurePass',
+  password: process.env.PGPASSWORD || '',
   database: process.env.PGDATABASE || 'dw_unified',
 };

← 4b82324 Fix JSON-LD parse: sanitize literal control chars in product · back to Rebel Walls Scraper · (newest)