vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule

6b8e62ecdd226ee810d5cfd1f9dfd4d2a95cf2db · 2026-06-01 16:14:12 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit 6b8e62ecdd226ee810d5cfd1f9dfd4d2a95cf2db
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jun 1 16:14:12 2026 -0700

    vendor-redact: mount api-vendor-redact middleware (was missing) — scrubs DW vendor names from /api responses per standing rule
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index e56aa9e..9349a11 100644
--- a/server.js
+++ b/server.js
@@ -6,6 +6,9 @@ const app = express();
 const PORT = process.env.PORT || 9900;
 
 app.use(express.json());
+// Vendor-redact: strip DW vendor names from /api/* responses (titles + vendor field).
+// Standing rule — DW vendor names NEVER appear in customer-facing UI. (Matches the fleet.)
+app.use(require('../_shared/api-vendor-redact'));
 
 // Guard: never serve editor/snapshot artifacts (.bak / .pre-* / *~ / .orig) from static root.
 app.use((req, res, next) => {

← 560291c fleet rebuild: dw-header (hamburgers UL + centered name) + u · back to Wallpaperwednesday · gitignore: add missing standard excludes (.next/) ad8b876 →