From 530cb94f0bec71816ad96de05cf47a845815a10b Mon Sep 17 00:00:00 2001
From: Alex van Andel <me@alexvanandel.com>
Date: Thu, 13 Nov 2025 02:42:13 +0100
Subject: [PATCH] fix: make identifier url safe 2 (#25112)

* fix: Make identifier for rate limit URL safe

* fix: Make identifier for rate limit URL safe using hasing
---
 apps/web/middleware.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/middleware.ts b/apps/web/middleware.ts
index cb8f50f19b..dfbe1ed52f 100644
--- a/apps/web/middleware.ts
+++ b/apps/web/middleware.ts
@@ -101,7 +101,7 @@ const middleware = async (req: NextRequest): Promise<NextResponse<unknown>> => {
   try {
     await checkRateLimitAndThrowError({
       rateLimitingType: "common",
-      identifier: `${encodeURIComponent(req.nextUrl.pathname)}-${piiHasher.hash(requestorIp)}`,
+      identifier: piiHasher.hash(`${req.nextUrl.pathname}-${requestorIp}`),
     });
   } catch (error) {
     if (error instanceof HttpError) {