From 59fcecedeed3ad108ea3d2203759c965ecf60be3 Mon Sep 17 00:00:00 2001 From: "[dyad]" Date: Mon, 3 Aug 2026 11:16:50 +0200 Subject: [PATCH] Update 2 files --- middleware.ts | 9 ++------- next.config.ts | 4 +--- 2 files changed, 3 insertions(+), 10 deletions(-) diff --git a/middleware.ts b/middleware.ts index d98648a..1410a7c 100644 --- a/middleware.ts +++ b/middleware.ts @@ -2,15 +2,10 @@ import { NextResponse, type NextRequest } from 'next/server'; import { isCsrfProtectedRequest, isTrustedRequestOrigin } from '@/lib/csrf'; export function middleware(request: NextRequest) { - console.log('[middleware] path:', request.nextUrl.pathname, 'method:', request.method, 'origin:', request.headers.get('origin')); - const csrfProtected = isCsrfProtectedRequest(request); - const trusted = isTrustedRequestOrigin(request); - console.log('[middleware] csrfProtected:', csrfProtected, 'trusted:', trusted); - if (csrfProtected && !trusted) { - console.log('[middleware] BLOCKING request'); + if (isCsrfProtectedRequest(request) && !isTrustedRequestOrigin(request)) { return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 }); } - console.log('[middleware] ALLOWING request'); + return NextResponse.next(); } diff --git a/next.config.ts b/next.config.ts index f3f674c..9ae23a8 100755 --- a/next.config.ts +++ b/next.config.ts @@ -2,9 +2,7 @@ import type { NextConfig } from "next"; const nextConfig: NextConfig = { output: "standalone", - turbopack: { - root: "/Users/fatmacetin/dyad-apps/exametra", - }, + /* config options here */ typescript: { ignoreBuildErrors: true, },