next.js
90c5a66b - Docs: Add authentication note for external/internal image sources (#83469)

Commit
182 days ago
Docs: Add authentication note for external/internal image sources (#83469) **Summary** This PR adds a note to the documentation clarifying the behavior when using external or internal URLs (API Routes) as image sources with Next.js Image Optimization. This change addresses issue #82610. **Details** - Added a note explaining that, for security reasons, request headers are not forwarded to API Routes or external URLs when Image Optimization is used. - Documented that if image data requires authentication, the `unoptimized` property should be considered to disable Image Optimization. **Why** Users may be confused when trying to load images from endpoints that require authentication. This clarification helps developers understand the limitation and how to handle such cases. **References** - [Vercel Changelog: CVE-2025-57752](https://vercel.com/changelog/cve-2025-57752) - [Next.js GitHub Issue #82703](https://github.com/vercel/next.js/issues/82703) --- resolves #82610 --------- Co-authored-by: Joseph <sephxd1234@gmail.com> Co-authored-by: Steven <steven@ceriously.com>
Author
Parents
Loading