vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule

5d90df450b5cf9619d1c40920acf44f024c7a591 · 2026-06-01 16:14:12 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 5d90df450b5cf9619d1c40920acf44f024c7a591
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jun 1 16:14:12 2026 -0700

    vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index d2321f8..a2af5cf 100644
--- a/server.js
+++ b/server.js
@@ -6,6 +6,9 @@ const app = express();
 const PORT = process.env.PORT || 9899;
 
 app.use(express.json());
+// Vendor-redact: strip DW vendor names from /api/* responses (titles + vendor field).
+// Standing rule — DW vendor names NEVER appear in customer-facing UI. (Matches the fleet.)
+app.use(require('../_shared/api-vendor-redact'));
 
 // 404-guard: never serve .bak / .pre-* / .orig snapshot files from static root
 app.use((req, res, next) => {

← 81132b6 fleet rebuild: dw-header (hamburgers UL + centered name) + u · back to Textiletuesday · gitignore: add missing standard excludes (.next/) 444514c →