wire api-vendor-redact middleware — strip vendor field + vendors facet + ?vendor= query on /api/*

de0354f9fb7fce385244238c31f5ea237cda3a93 · 2026-05-25 21:36:46 -0700 · Steve

Files touched

M server.js

Diff

commit de0354f9fb7fce385244238c31f5ea237cda3a93
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon May 25 21:36:46 2026 -0700

    wire api-vendor-redact middleware — strip vendor field + vendors facet + ?vendor= query on /api/*
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index bdfacdc..d1bf189 100644
--- a/server.js
+++ b/server.js
@@ -140,6 +140,10 @@ function sortProducts(list, mode) {
 
 app.use(helmet({ contentSecurityPolicy: false }));
 app.use(express.json({ limit: '256kb' }));
+// Strips vendor field + vendors facet from JSON responses + drops ?vendor= query.
+// MUST be before any /api/* route registration. (api-vendor-redact-only-loads-if-present)
+try { app.use(require('../_shared/api-vendor-redact')); }
+catch (e) { console.warn(`[${__SITE}] api-vendor-redact unavailable (${e.message})`); }
 // Universal contact module — modals, /api/send-inquiry, /api/send-sample, /zd-loader.js
 require('./_universal-contact')(app, { siteName: "Silverleaf Wallpaper", zdColor: "#c0c0c8", zdPosition: 'right' });
 require('./_universal-auth')(app, { siteName: "silverleafwallpaper" });

← 2f96e5f add noopener noreferrer to target=_blank + window.open (FB l · back to Silverleafwallpaper · rails: wire /api/sliders into horizontal scroll-snap rail se fd0827e →