fix: remove leaked public/index.html.bak file + harden bak-guard regex to cover .bak-* filenames

03655a14576e5cc2864e87703a38d72cb2d5857a · 2026-05-30 21:24:33 -0700 · Steve Abrams

- rm public/index.html.bak-20260526152130 (was returning 200 via static)
- guard regex /(^|\.)bak(\.|$)/ missed .bak-TIMESTAMP pattern; updated to ([.\-]|$)
- .gitignore: add *.bak-* alongside existing *.bak / *.bak.*

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Files touched

M .gitignore
M server.js

Diff

commit 03655a14576e5cc2864e87703a38d72cb2d5857a
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat May 30 21:24:33 2026 -0700

    fix: remove leaked public/index.html.bak file + harden bak-guard regex to cover .bak-* filenames
    
    - rm public/index.html.bak-20260526152130 (was returning 200 via static)
    - guard regex /(^|\.)bak(\.|$)/ missed .bak-TIMESTAMP pattern; updated to ([.\-]|$)
    - .gitignore: add *.bak-* alongside existing *.bak / *.bak.*
    
    Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .gitignore | 1 +
 server.js  | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 7e2084a..caca2c7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,5 +11,6 @@ build/
 .next/
 *.bak
 *.bak.*
+*.bak-*
 *.pre-*
 .deploy.conf
diff --git a/server.js b/server.js
index 39705e0..790115e 100644
--- a/server.js
+++ b/server.js
@@ -147,9 +147,9 @@ app.use(express.json({ limit: '256kb' }));
 require('./_universal-contact')(app, { siteName: "Wallpaper Canada", zdColor: "#d4a847", zdPosition: 'right' });
 require('./_universal-auth')(app, { siteName: "wallpapercanada" });
 
-// Guard: never serve editor snapshot files (*.bak, *.bak.*, *.pre-*) from static root.
+// Guard: never serve editor snapshot files (*.bak, *.bak.*, *.bak-*, *.pre-*) from static root.
 app.use((req, res, next) => {
-  if (/(^|\.)bak(\.|$)|\.pre-/i.test(req.path)) {
+  if (/(^|\.)bak([.\-]|$)|\.pre-/i.test(req.path)) {
     return res.status(404).send('Not found');
   }
   next();

← b6b9120 feat(fleet): theme1/theme2 query-param-gated toggle on catal · back to Wallpapercanada · facets: filter-aware drill-down counts (shared filterProduct 42a408e →