From 493b30c6b92487487cf1bf95f922b4536b02b13e Mon Sep 17 00:00:00 2001
From: seaislee1209 <seaislee129@gmail.com>
Date: Sun, 22 Mar 2026 21:58:52 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20source=20map=20=E7=A6=81=E7=94=A8=20+=20?=
 =?UTF-8?q?MD5=20=E6=94=B9=20SHA256?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

①vite build sourcemap: false，防止源码泄露
②tos_client.py 文件去重哈希从 MD5 改为 SHA256

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 backend/utils/tos_client.py | 2 +-
 web/vite.config.ts          | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/backend/utils/tos_client.py b/backend/utils/tos_client.py
index 377d7f6..984f19f 100644
--- a/backend/utils/tos_client.py
+++ b/backend/utils/tos_client.py
@@ -47,7 +47,7 @@ def upload_file(file_obj, folder='uploads'):
     content = file_obj.read()
 
     # Use content hash as key for dedup
-    content_hash = hashlib.md5(content).hexdigest()
+    content_hash = hashlib.sha256(content).hexdigest()
     key = f'{folder}/{content_hash}.{ext}'
     url = f'{settings.TOS_CDN_DOMAIN}/{key}'
 
diff --git a/web/vite.config.ts b/web/vite.config.ts
index f5d8d01..f3b9633 100644
--- a/web/vite.config.ts
+++ b/web/vite.config.ts
@@ -4,6 +4,9 @@ import react from '@vitejs/plugin-react'
 
 export default defineConfig({
   plugins: [react()],
+  build: {
+    sourcemap: false,
+  },
   server: {
     proxy: {
       '/api': {