Files
adminpanel/next.config.ts
Sathish df16a76909 fix(security): resolve audit findings — debug log, payment bypass, images
- Remove the committed firebase-debug.log (contains a personal Google
  account) and gitignore it. NOTE: still present in history — a history
  rewrite or written confirmation is still outstanding
- Remove the client-side skipPaymentCheck approval bypass
- Replace the wildcard image remote host "**" with an explicit allowlist
  (adds DigitalOcean Spaces)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-04 11:30:48 +05:30

18 lines
429 B
TypeScript

import type { NextConfig } from "next";
const nextConfig: NextConfig = {
// Enable standalone output for Docker
output: "standalone",
// Image optimization
images: {
remotePatterns: [
{ protocol: "https", hostname: "*.contabostorage.com" },
{ protocol: "https", hostname: "*.amazonaws.com" },
{ protocol: "https", hostname: "*.digitaloceanspaces.com" },
],
},
};
export default nextConfig;