Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check origins of Server Action requests #56753

Merged
merged 5 commits into from
Oct 12, 2023
Merged

Check origins of Server Action requests #56753

merged 5 commits into from
Oct 12, 2023

Conversation

shuding
Copy link
Member

@shuding shuding commented Oct 12, 2023

This check ensures that the x-forwarded-host (fallbacks to host if missing) header matches the request's origin header.

@ijjk ijjk added created-by: Next.js team PRs by the Next.js team. type: next labels Oct 12, 2023
@shuding shuding marked this pull request as ready for review October 12, 2023 16:03
@ijjk
Copy link
Member

ijjk commented Oct 12, 2023

Stats from current PR

Default Build (Increase detected ⚠️)
General Overall increase ⚠️
vercel/next.js canary vercel/next.js shu/9kyu Change
buildDuration 10.6s 10.7s N/A
buildDurationCached 6.3s 6.2s N/A
nodeModulesSize 172 MB 172 MB ⚠️ +43.8 kB
nextStartRea..uration (ms) 517ms 517ms
Client Bundles (main, webpack)
vercel/next.js canary vercel/next.js shu/9kyu Change
199-HASH.js gzip 27.5 kB 27.5 kB N/A
3f784ff6-HASH.js gzip 50.9 kB 50.9 kB
99.HASH.js gzip 182 B 182 B
framework-HASH.js gzip 45.3 kB 45.3 kB
main-app-HASH.js gzip 254 B 252 B N/A
main-HASH.js gzip 32.9 kB 32.9 kB N/A
webpack-HASH.js gzip 1.75 kB 1.75 kB N/A
Overall change 96.4 kB 96.4 kB
Legacy Client Bundles (polyfills)
vercel/next.js canary vercel/next.js shu/9kyu Change
polyfills-HASH.js gzip 31 kB 31 kB
Overall change 31 kB 31 kB
Client Pages
vercel/next.js canary vercel/next.js shu/9kyu Change
_app-HASH.js gzip 206 B 205 B N/A
_error-HASH.js gzip 182 B 180 B N/A
amp-HASH.js gzip 506 B 505 B N/A
css-HASH.js gzip 322 B 323 B N/A
dynamic-HASH.js gzip 2.57 kB 2.57 kB N/A
edge-ssr-HASH.js gzip 260 B 259 B N/A
head-HASH.js gzip 350 B 350 B
hooks-HASH.js gzip 369 B 369 B
image-HASH.js gzip 4.35 kB 4.35 kB N/A
index-HASH.js gzip 256 B 256 B
link-HASH.js gzip 2.64 kB 2.63 kB N/A
routerDirect..HASH.js gzip 312 B 311 B N/A
script-HASH.js gzip 385 B 384 B N/A
withRouter-HASH.js gzip 307 B 308 B N/A
1afbb74e6ecf..834.css gzip 106 B 106 B
Overall change 1.08 kB 1.08 kB
Client Build Manifests
vercel/next.js canary vercel/next.js shu/9kyu Change
_buildManifest.js gzip 485 B 482 B N/A
Overall change 0 B 0 B
Rendered Page Sizes
vercel/next.js canary vercel/next.js shu/9kyu Change
index.html gzip 528 B 530 B N/A
link.html gzip 541 B 543 B N/A
withRouter.html gzip 523 B 525 B N/A
Overall change 0 B 0 B
Edge SSR bundle Size Overall increase ⚠️
vercel/next.js canary vercel/next.js shu/9kyu Change
edge-ssr.js gzip 93.7 kB 93.7 kB N/A
page.js gzip 152 kB 152 kB ⚠️ +156 B
Overall change 152 kB 152 kB ⚠️ +156 B
Middleware size
vercel/next.js canary vercel/next.js shu/9kyu Change
middleware-b..fest.js gzip 628 B 623 B N/A
middleware-r..fest.js gzip 150 B 151 B N/A
middleware.js gzip 22.9 kB 22.9 kB N/A
edge-runtime..pack.js gzip 1.92 kB 1.92 kB
Overall change 1.92 kB 1.92 kB
Diff details
Diff for page.js

Diff too large to display

Commit: 8f304cc

@kodiakhq kodiakhq bot merged commit e057c26 into canary Oct 12, 2023
98 of 103 checks passed
@kodiakhq kodiakhq bot deleted the shu/9kyu branch October 12, 2023 16:43
@github-actions github-actions bot added the locked label Nov 2, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 2, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants