@salla.sa/twilight-theme-engine 1.0.151 → 1.0.152

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salla.sa/twilight-theme-engine",
-  "version": "1.0.151",
+  "version": "1.0.152",
   "publishConfig": {
     "access": "public"
   },

package/tailwind/routes/page/loader.ts.txt

@@ -2,8 +2,12 @@ import type { PageSingleProps } from './types';
 import type { IdParams } from '../types';
 import { page } from '../../api/page';
 import { RouteId } from '../../router/route-ids';
+import { notFound } from '../../providers/NavigationProvider';
 
 export async function pageSingleLoader({ params }: { params: IdParams }): Promise<PageSingleProps> {
+  // A page id is digits; anything else gets the API's 403 or Cloudflare's 400, not a 404, and
+  // the error page went out as a 500, as for a product (`productLoader`).
+  if (!/^\d+$/.test(params.id)) throw notFound();
   const data = await page.findOrThrow(params.id);
   return {
     page: {

package/tailwind/routes/product/loader.ts.txt

@@ -4,8 +4,13 @@ import { product } from '../../api/product';
 import { getTwilightContext } from '../../twilight/context';
 import { RouteId } from '../../router/route-ids';
 import type { Breadcrumb } from '../../types';
+import { notFound } from '../../providers/NavigationProvider';
 
 export async function productLoader({ params }: { params: IdParams }): Promise<ProductPageProps> {
+  // A product id is digits. Anything else is put in the API path as it is, and the API answers
+  // neither 404 nor 410 for it: `hello.html` is a 403 and `oc%u0022xx` Cloudflare's 400, so the
+  // error page went out as a 500 (`/php_info.html` matches `p{$id}`, and scanners ask for it).
+  if (!/^\d+$/.test(params.id)) throw notFound();
   const data = await product.findOrThrow(params.id);
   const i18n = getTwilightContext().i18n;
   const home: Breadcrumb = { name: i18n.t('common.titles.home'), url: '/' };