Compare commits

...

2 Commits

2 changed files with 7 additions and 0 deletions
+1
View File
@@ -7,6 +7,7 @@ All notable changes to the **Prowler UI** are documented in this file.
### 🔒 Security
- Upgrade React to 19.2.5 and Next.js to 16.2.3 to mitigate CVE-2026-23869 (React2DoS), a high-severity unauthenticated remote DoS vulnerability in the React Flight Protocol's Server Function deserialization [(#10754)](https://github.com/prowler-cloud/prowler/pull/10754)
- Disable Next.js 16 Server Function argument logging to prevent sign-in credentials (email/password) from being printed to the terminal during development[(#10760)](https://github.com/prowler-cloud/prowler/pull/10760)
---
+6
View File
@@ -46,6 +46,12 @@ const nextConfig = {
turbopack: {
root: __dirname,
},
logging: {
// Next.js 16 prints every Server Function call with its arguments
// (e.g. `authenticate(null, {email, password}) ...`), which leaks
// credentials and other sensitive payloads to the terminal.
serverFunctions: false,
},
async headers() {
const sentryEndpoint = getSentryReportEndpoint();
const headers = [