HealthLog

tom/HealthLog

0 Fork 0

mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-12 06:06:10 +00:00

Commit Graph

Author	SHA1	Message	Date
Marc-André Bombeck	aae7bce078	test(security): write the next/image import matchers as literals	2026-10-22 11:32:57 +02:00
Marc-André Bombeck	1fa33f2aee	fix(security): turn the image optimizer off Nothing renders through next/image, so /_next/image only offered a route that fetches, decodes and re-encodes whatever local path a request names. With images.unoptimized Next answers it with 404 before reading a parameter. A guard fails when next/image is imported while the optimizer is off, or when the optimizer returns with SVG input allowed.	2026-10-22 08:25:49 +02:00

Author

SHA1

Message

Date

Marc-André Bombeck

aae7bce078

test(security): write the next/image import matchers as literals

2026-10-22 11:32:57 +02:00

Marc-André Bombeck

1fa33f2aee

fix(security): turn the image optimizer off

Nothing renders through next/image, so /_next/image only offered a route
that fetches, decodes and re-encodes whatever local path a request names.
With images.unoptimized Next answers it with 404 before reading a
parameter. A guard fails when next/image is imported while the optimizer
is off, or when the optimizer returns with SVG input allowed.

2026-10-22 08:25:49 +02:00