fix: remove leaked .bak file from public/ and patch .bak-* block regex + .gitignore

6ae80a770036357f293c9aa8267ff629d55ca884 · 2026-05-30 21:25:06 -0700 · Steve Abrams

- Deleted public/index.html.bak-20260526152130 (was served as HTTP 200)
- Fixed bak-block middleware regex: .bak-TIMESTAMP extension was not matched
- Added *.bak-* pattern to .gitignore to prevent future leaks

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Files touched

M .gitignore
M server.js

Diff

commit 6ae80a770036357f293c9aa8267ff629d55ca884
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat May 30 21:25:06 2026 -0700

    fix: remove leaked .bak file from public/ and patch .bak-* block regex + .gitignore
    
    - Deleted public/index.html.bak-20260526152130 (was served as HTTP 200)
    - Fixed bak-block middleware regex: .bak-TIMESTAMP extension was not matched
    - Added *.bak-* pattern to .gitignore to prevent future leaks
    
    Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .gitignore | 1 +
 server.js  | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 1140724..3a7a026 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,4 +11,5 @@ build/
 .next/
 *.bak
 *.bak.*
+*.bak-*
 *.pre-*
diff --git a/server.js b/server.js
index ae4a1d4..a054cc4 100644
--- a/server.js
+++ b/server.js
@@ -164,7 +164,7 @@ require("./_universal-contact")(app, cfg.contact);
 require("./_universal-auth")(app, cfg.auth);
 // Block stale snapshot files in public/ from being served as static content.
 app.use((req, res, next) => {
-  if (/\.(bak|pre-[^/]*)($|\.)|\.bak\.|\.pre-/i.test(req.path)) return res.status(404).send('Not found');
+  if (/\.(bak(-[^/]*)?|pre-[^/]*)($|\.)|\.bak[-.]|\.pre-/i.test(req.path)) return res.status(404).send('Not found');
   next();
 });
 app.use(express.static(path.join(__dirname, 'public')));

← 390be43 feat(fleet): theme1/theme2 query-param-gated toggle on catal · back to Textilewallpaper · /api/facets drill-down counts via shared filterProducts() wi 8301be5 →