Steve Faulkner 6986e1017f fix: validate image optimization content types and width bounds (#101) ...

- Add Content-Security-Policy and X-Content-Type-Options headers to image responses
- Validate Content-Type allowlist (reject SVG, HTML, non-image types)
- Bound width parameter to configured deviceSizes/imageSizes with 3840px max
- Add deviceSizes and imageSizes to NextConfig type
- Apply to all image paths: Workers, Node.js prod server (App + Pages Router)
- Fix benchmarks limit param NaN handling

2026-02-26 05:08:44 +00:00

..

app-router-cloudflare

Initial public release of vinext

2026-02-24 09:29:39 -06:00

app-router-playground

Initial public release of vinext

2026-02-24 09:29:39 -06:00

benchmarks

fix: validate image optimization content types and width bounds (#101)

2026-02-26 05:08:44 +00:00

hackernews

fix: add request validation to dev server (#98)

2026-02-25 22:51:16 -06:00

nextra-docs-template

Initial public release of vinext

2026-02-24 09:29:39 -06:00

pages-router-cloudflare

fix: add request validation to dev server (#98)

2026-02-25 22:51:16 -06:00

realworld-api-rest

fix: add request validation to dev server (#98)

2026-02-25 22:51:16 -06:00

tpr-demo

Initial public release of vinext

2026-02-24 09:29:39 -06:00