server: 404-guard for .bak/.pre-/.orig/.swp paths before static mount

1f37fd02ee3d380b56872382a868840ef36ec439 · 2026-05-19 18:32:16 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 1f37fd02ee3d380b56872382a868840ef36ec439
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 18:32:16 2026 -0700

    server: 404-guard for .bak/.pre-/.orig/.swp paths before static mount
---
 server.js | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/server.js b/server.js
index c5750cf..01f8553 100644
--- a/server.js
+++ b/server.js
@@ -230,6 +230,15 @@ function basicAuth(req, res, next) {
 
 app.use(basicAuth);
 app.use(express.json());
+
+// 404-guard: block backup / swap / scrub-snapshot paths before static mount
+app.use((req, res, next) => {
+  if (/\.(bak|orig|rej|swp|swo)(\.|$)|\.pre-|~$/i.test(req.path)) {
+    return res.status(404).send('Not found');
+  }
+  next();
+});
+
 app.use(express.static(path.join(__dirname, 'public')));
 
 // Vendor URL mapping

← 5417edf gitignore: broaden backup/swap file exclusions · back to Sku Check Skill · ui: add rel=noopener noreferrer to all target=_blank anchors 46a693f →