From f8d96cb7ae1131161eff4ff60a2bc5a4be54c24e Mon Sep 17 00:00:00 2001
From: Bryan Helmkamp <bryan@brynary.com>
Date: Thu, 5 Mar 2026 10:25:07 -0500
Subject: [PATCH] Fix server-side error message leaking to browser in
 production

error.message was displayed to users in all environments, while
stack traces were correctly gated behind import.meta.env.DEV.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 apps/arc-web/app/root.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/arc-web/app/root.tsx b/apps/arc-web/app/root.tsx
index 4374cdeb7..233720a20 100644
--- a/apps/arc-web/app/root.tsx
+++ b/apps/arc-web/app/root.tsx
@@ -72,8 +72,8 @@ export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
       message = error.statusText || message;
     }
   } else if (error instanceof Error) {
-    message = error.message;
     if (import.meta.env.DEV) {
+      message = error.message;
       stack = error.stack;
     }
   }