Skip to content

chore(turbopack): css chunk ident execute wrong method#15

Merged
fireairforce merged 1 commit intoutoo-patch-v15.3.2from
fix-typo
Jun 3, 2025
Merged

chore(turbopack): css chunk ident execute wrong method#15
fireairforce merged 1 commit intoutoo-patch-v15.3.2from
fix-typo

Conversation

@fireairforce
Copy link
Member

following: #14

image

@fireairforce fireairforce requested review from elrrrrrrr and xusd320 June 3, 2025 06:20
@fireairforce fireairforce merged commit fc40212 into utoo-patch-v15.3.2 Jun 3, 2025
8 of 18 checks passed
@xusd320 xusd320 deleted the fix-typo branch November 25, 2025 12:14
xusd320 pushed a commit that referenced this pull request Jan 19, 2026
* remove urlencoded server action handling (#14)

* remove urlencoded server action handling

* urlencoded POSTs should still flow through action handler

* bailout early for urlencoded

* tweak handling to 404 in feetch action case

* error when there are no server actions (#15)

* remove custom error

* remove dev gate

* error when there are no server actions

* gate against dev

* Check whether action ids are valid before parsing (#16)

* Check whether action ids are valid before parsing

In an effort to narrow access to parsing methods Next.js now prequalifies MPA form parsing by ensuring there are only valid action IDs as part of the submission. This is not meant to be a strong line of defense against malicious payloads since action IDs are not private and are for many apps relatively easy to acquire. It does however provide some limited narrowing of code paths so that action decoding only happens for plausible actions

Additionally all other branches that use next-action header now consistently check the header before proceeding with parsing. This is also a perf improvement.

* fix test assertion

---------

Co-authored-by: Zack Tanner <[email protected]>

---------

Co-authored-by: Josh Story <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants