fix: sanitize error messages in production mode

[southpolesteve]

Summary

Returns generic error messages in production responses instead of raw exception details. Full errors are still logged server-side for debugging.

• App Router: new __sanitizeErrorForClient() replaces non-navigation errors with a generic message + djb2 digest hash (matching Next.js behavior) in production. Navigation errors (redirect, notFound, etc.) pass through unchanged with their digests intact.
• Pages Router: error responses no longer include internal file paths
• Middleware: production mode returns "Internal Server Error", dev mode preserves detail
• Worker entry examples: updated to use generic error responses
• RSC and SSR onError callbacks generate digest hashes for non-navigation errors in production, allowing server-log correlation without exposing details to clients

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/cloudflare/vinext@97

commit: a4c3cf6

[github-actions]

Example	Preview	Production	Original
app-router-cloudflare	preview	production
pages-router-cloudflare	preview	production
app-router-playground	preview	production	original
realworld-api-rest	preview	production
nextra-docs-template	preview	production
benchmarks	preview	production
hackernews	preview	production	original