From 1b3e3ca2ec5fc0c716cb27a544adbb4874075dc5 Mon Sep 17 00:00:00 2001
From: "sentry[bot]" <39604003+sentry[bot]@users.noreply.github.com>
Date: Sat, 29 Aug 2026 11:03:48 +0000
Subject: [PATCH] Fix: Doc feedback hashing crashes on HTTP origins

---
 src/utils/hash.ts | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/utils/hash.ts b/src/utils/hash.ts
index 4708cce97..2c9d3a72e 100644
--- a/src/utils/hash.ts
+++ b/src/utils/hash.ts
@@ -3,10 +3,30 @@
  * Works in both browser and Node.js environments using Web Crypto API.
  */
 
+/**
+ * Simple FNV-1a 32-bit hash fallback for environments where
+ * crypto.subtle is unavailable (e.g. non-secure HTTP origins).
+ * Returns a hex string like SHA-256 but shorter (8 chars).
+ */
+function fnv1aHex(input: string): string {
+  let hash = 0x811c9dc5
+  for (let i = 0; i < input.length; i++) {
+    hash ^= input.charCodeAt(i)
+    hash = (hash * 0x01000193) >>> 0
+  }
+  return hash.toString(16).padStart(8, '0')
+}
+
 /**
  * Compute SHA-256 hash of a string, returning hex-encoded result.
+ * In browser contexts where crypto.subtle is unavailable (e.g. non-secure
+ * HTTP origins), falls back to a simple FNV-1a hash so the page doesn't crash.
+ * Server-side callers always have crypto.subtle available (Node.js 18+).
  */
 export async function sha256Hex(input: string): Promise<string> {
+  if (typeof window !== 'undefined' && !crypto?.subtle) {
+    return fnv1aHex(input)
+  }
   const encoder = new TextEncoder()
   const data = encoder.encode(input)
   const hashBuffer = await crypto.subtle.digest('SHA-256', data)