npm - create-nextblock - Versions diffs - 0.13.1 → 0.13.2 - Mend

create-nextblock 0.13.1 → 0.13.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (34) hide show

package/templates/nextblock-template/next-env.d.ts CHANGED Viewed

@@ -1,6 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
-import "./.next/dev/types/routes.d.ts";
+import "./.next/types/routes.d.ts";
 // NOTE: This file should not be edited
 // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/templates/nextblock-template/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@nextblock-cms/template",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "private": true,
   "scripts": {
     "dev": "next dev",

package/templates/nextblock-template/proxy.ts CHANGED Viewed

@@ -394,6 +394,11 @@ function createContentSecurityPolicy(nonceValue: string, supabaseUrl: string | u
       "'self'",
       'data:',
       'blob:',
+      // Allow any https image source. NextBlock lets trusted ADMIN/WRITER authors
+      // embed external image URLs (e.g. AI-inserted stock photos from Unsplash/
+      // Pexels, or any pasted https image). Images cannot execute code, so this is
+      // a low-risk relaxation; script/style/connect stay strict.
+      'https:',
       supabaseOrigin,
       ...assetSources,
       'https://checkout.freemius.com',