diff --git a/backend/utils/tos_client.py b/backend/utils/tos_client.py
index 377d7f6..984f19f 100644
--- a/backend/utils/tos_client.py
+++ b/backend/utils/tos_client.py
@@ -47,7 +47,7 @@ def upload_file(file_obj, folder='uploads'):
     content = file_obj.read()
 
     # Use content hash as key for dedup
-    content_hash = hashlib.md5(content).hexdigest()
+    content_hash = hashlib.sha256(content).hexdigest()
     key = f'{folder}/{content_hash}.{ext}'
     url = f'{settings.TOS_CDN_DOMAIN}/{key}'
 
diff --git a/web/vite.config.ts b/web/vite.config.ts
index f5d8d01..f3b9633 100644
--- a/web/vite.config.ts
+++ b/web/vite.config.ts
@@ -4,6 +4,9 @@ import react from '@vitejs/plugin-react'
 
 export default defineConfig({
   plugins: [react()],
+  build: {
+    sourcemap: false,
+  },
   server: {
     proxy: {
       '/api': {