wire api-vendor-redact middleware: strips vendor field + vendors facet from all /api/* responses

f5fbace26977b45579df10b97e644a3d8b6f9454 · 2026-05-25 21:37:05 -0700 · Steve

Files touched

M server.js

Diff

commit f5fbace26977b45579df10b97e644a3d8b6f9454
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon May 25 21:37:05 2026 -0700

    wire api-vendor-redact middleware: strips vendor field + vendors facet from all /api/* responses
---
 server.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server.js b/server.js
index 38622d2..8d2ee44 100644
--- a/server.js
+++ b/server.js
@@ -136,6 +136,10 @@ function sortProducts(list, mode) {
 }
 
 
+// Vendor-name redaction at the API surface (fleet-wide standing rule —
+// DW vendor names NEVER in customer-facing UI; mounted first so every
+// downstream /api/* response is walked).
+try { app.use(require('../_shared/api-vendor-redact')); } catch (e) { console.error(`[${__SITE}] api-vendor-redact unavailable (${e.message}) — continuing without`); }
 app.use(express.json({ limit: "256kb" }));
 // Site config — prefer _shared/site-config (canonical) but fall back to an
 // inline minimal loader so this server.js is self-contained on Kamatera.

← b321ec5 remove p.vendor render on rail cards — replace with Designer · back to Suedewallpaper · rails: wire /api/sliders into horizontal scroll-snap rail se 37d62c1 →