From 66f530954cf2a5909a4cf4d8d10a570da15c828a Mon Sep 17 00:00:00 2001 From: DIYgod Date: Sun, 17 Mar 2024 04:56:20 +0800 Subject: [PATCH] fix: image xss --- next.config.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/next.config.js b/next.config.js index 092b5333..d5e24e83 100644 --- a/next.config.js +++ b/next.config.js @@ -47,11 +47,9 @@ module.exports = withBundleAnalyzer( }, images: { - dangerouslyAllowSVG: true, contentSecurityPolicy: "default-src 'self'; script-src 'none'; sandbox; style-src 'unsafe-inline';", remotePatterns: [ - { hostname: "**" }, { protocol: "https", hostname: "pbs.twimg.com" }, { protocol: "https", hostname: "abs.twimg.com" }, ],