block _all_dbs

* * *

This commit was sponsored by Human JavaScript.
Human JavaScript is the best way to learn modern
web application development today, read it now:

http://go.hood.ie/human-javascript

lib/middleware/api.js

@@ -12,6 +12,18 @@ module.exports = function (config) {
     if (!/^\/_api/.test(req.url)) {
       return next();
     }
+
+    // block /_api/_all_dbs
+    if (/^\/_api\/_all_dbs/.test(req.url)) {
+      var body = '{"error":"not found"}\n';
+      res.writeHead(404, {
+        'Content-Length': body.length,
+        'Content-Type': 'application/json'
+      });
+      res.end(body);
+      return;
+    }
+
     // remove the /_api part from url before proxying
     var url = req.url.substr('/_api'.length);
     // proxy request to CouchDB