Add whitelisting for imgproxy source URLs

networkteam · Sep 6, 2024 · 579395e · 579395e
1 parent 9f6db4f
commit 579395e
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/src/imgproxy/loader.ts b/src/imgproxy/loader.ts
@@ -2,10 +2,12 @@ import { urlSafeBase64 } from './utils';
 import { ImageLoaderProps } from 'next/image';
 
 const imgProxyLoader =
-  (pathSegment: string = '_image') =>
+  (pathSegment: string = '_image', whitelistedSourceUrls: string[]) =>
   ({ src, width, quality }: ImageLoaderProps) => {
-    // If the source is not an S3 URL, return the original source
-    if (!src.startsWith('s3://')) return src;
+    // if the source url is not whitelisted, return the original src
+    if (!whitelistedSourceUrls.some((url) => src.startsWith(url))) {
+      return src;
+    }
 
     const encodedUrl = urlSafeBase64(src);
     const params = new URLSearchParams();