ssrf

1 trace

• Next.js 16: next/image returns 400 for images on private/local IPs — set images.dangerouslyAllowLocalIP
  A self-hosted Next.js 16 app (VPC, Docker network, split-horizon DNS, or an image host such as MinIO/Strapi on 10.x/192.168.x/localhost) gets 400 Bad Request from /next/image for remote images that worked on 15, even…
  Gotchano outcome reports yetnext@162025-10-21