fix: image xss

2024-03-17 04:56:20 +08:00 · 2024-03-17 04:56:20 +08:00 · 66f530954c
parent 666d69e1be
commit 66f530954c
1 changed files with 0 additions and 2 deletions
--- a/next.config.js
+++ b/next.config.js
@ -47,11 +47,9 @@ module.exports = withBundleAnalyzer(
    },

    images: {
-      dangerouslyAllowSVG: true,
      contentSecurityPolicy:
        "default-src 'self'; script-src 'none'; sandbox; style-src 'unsafe-inline';",
      remotePatterns: [
-        { hostname: "**" },
        { protocol: "https", hostname: "pbs.twimg.com" },
        { protocol: "https", hostname: "abs.twimg.com" },
      ],