-
Notifications
You must be signed in to change notification settings - Fork 2
피드백 내용 수정 최신화 #100
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
피드백 내용 수정 최신화 #100
Changes from all commits
a7a751c
bab8330
824ccdb
ff0d0c5
309dcd7
1449764
a39c8b9
8325a9a
5146a95
7747f82
fc3f28b
cd7be42
86ab527
524c1ba
f55edb8
b10d661
0bc34dd
127aef3
0eba71d
c386f06
5bb2b2a
1ea3d5a
cbd25fc
bc87eb9
a9cc9c6
9b88130
e1a59c9
b285b58
d9500ff
b9f8db7
7d1910b
35ba306
ae3a80b
6dbeea3
7eabd9b
5c2b7fb
344009a
4b35cfc
f844679
cdeba8f
f1710b9
51dfd20
eafc56d
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Large diffs are not rendered by default.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,4 @@ | ||
| import FloatingFab from "@/components/base-ui/Float"; | ||
| import TodayRecommendedBooks from "@/components/base-ui/News/today_recommended_books"; | ||
| import Image from "next/image"; | ||
| import { notFound } from "next/navigation"; | ||
|
|
@@ -159,21 +160,10 @@ export default async function NewsDetailPage({ params }: Props) { | |
| <div className="w-screen -mx-4 my-8 border-b-4 border-Gray-1 mt-25"></div> | ||
| <TodayRecommendedBooks books={DUMMY_BOOKS} className="mt-10" /> | ||
|
|
||
| {/* 문의하기 */} | ||
| <button | ||
| type="button" | ||
| className="fixed bottom-[86px] right-6 t:bottom-8 t:right-8 z-[60] cursor-pointer hover:opacity-80 transition-opacity w-12 h-12 t:w-[88px] t:h-[88px]" | ||
| aria-label="문의하기" | ||
| > | ||
| <Image | ||
| src="/inquiry.svg" | ||
| alt="문의하기" | ||
| width={88} | ||
| height={88} | ||
| className="w-full h-full" | ||
| priority | ||
| /> | ||
| </button> | ||
| <FloatingFab | ||
| iconSrc="/icons_calling.svg" | ||
| iconAlt="문의하기" | ||
| /> | ||
|
Comment on lines
+163
to
+166
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. "문의하기" No 🐛 Proposed fix — wire up a navigation or modal handler+import { useRouter } from "next/navigation";
// or pass a handler from a parent if this becomes a client component
- <FloatingFab
- iconSrc="/icons_calling.svg"
- iconAlt="문의하기"
- />
+ <FloatingFab
+ iconSrc="/icons_calling.svg"
+ iconAlt="문의하기"
+ onClick={() => { /* navigate to contact page or open modal */ }}
+ />Note: since 🤖 Prompt for AI Agents |
||
| </> | ||
| ); | ||
| } | ||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -3,6 +3,7 @@ | |||||||||||||||||||
| import Image from "next/image"; | ||||||||||||||||||||
| import NewsList from "@/components/base-ui/News/news_list"; | ||||||||||||||||||||
| import TodayRecommendedBooks from "@/components/base-ui/News/today_recommended_books"; | ||||||||||||||||||||
| import FloatingFab from "@/components/base-ui/Float"; | ||||||||||||||||||||
|
|
||||||||||||||||||||
| const DUMMY_NEWS = [ | ||||||||||||||||||||
| { | ||||||||||||||||||||
|
|
@@ -105,21 +106,11 @@ export default function NewsPage() { | |||||||||||||||||||
| <div className="w-full my-8 border-b-4 border-Gray-1"></div> | ||||||||||||||||||||
|
|
||||||||||||||||||||
| <TodayRecommendedBooks books={DUMMY_BOOKS} className="hidden d:flex" /> | ||||||||||||||||||||
| {/* 문의하기 */} | ||||||||||||||||||||
| <button | ||||||||||||||||||||
| type="button" | ||||||||||||||||||||
| className="fixed bottom-21 right-4 t:bottom-8 t:right-8 z-[60] cursor-pointer hover:opacity-80 transition-opacity w-18 h-18 t:w-22 t:h-22" | ||||||||||||||||||||
| aria-label="문의하기" | ||||||||||||||||||||
| > | ||||||||||||||||||||
| <Image | ||||||||||||||||||||
| src="/inquiry.svg" | ||||||||||||||||||||
| alt="문의하기" | ||||||||||||||||||||
| width={88} | ||||||||||||||||||||
| height={88} | ||||||||||||||||||||
| className="w-full h-full" | ||||||||||||||||||||
| priority | ||||||||||||||||||||
| /> | ||||||||||||||||||||
| </button> | ||||||||||||||||||||
|
|
||||||||||||||||||||
| <FloatingFab | ||||||||||||||||||||
| iconSrc="/icons_calling.svg" | ||||||||||||||||||||
| iconAlt="문의하기" | ||||||||||||||||||||
| /> | ||||||||||||||||||||
|
Comment on lines
+110
to
+113
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Same broken "문의하기" Identical to the issue in 🐛 Proposed fix- <FloatingFab
- iconSrc="/icons_calling.svg"
- iconAlt="문의하기"
- />
+ <FloatingFab
+ iconSrc="/icons_calling.svg"
+ iconAlt="문의하기"
+ onClick={() => { /* e.g. router.push("/contact") or open modal */ }}
+ />📝 Committable suggestion
Suggested change
🤖 Prompt for AI Agents |
||||||||||||||||||||
| </div> | ||||||||||||||||||||
| ); | ||||||||||||||||||||
| } | ||||||||||||||||||||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧩 Analysis chain
🏁 Script executed:
Repository: checkmo2025/FE
Length of output: 175
🌐 Web query:
CVE-2025-55182 CVE-2025-66478 React 19.2.0 RCE💡 Result:
react-server-dom-*packages). React 19.2.0 is vulnerable. Patched in React 19.2.1 (and also in the 19.0/19.1 patch lines). [1][2] (cloud.google.com)What to do: if you run React 19.2.0, upgrade at least to React 19.2.1 (and upgrade Next.js to a patched version if applicable), then redeploy. [1] (cloud.google.com)
Sources
[1] Google Cloud blog: “Responding to CVE-2025-55182” (cloud.google.com)
[2] NVD entry for CVE-2025-55182 (nvd.nist.gov)
[3] CIRCL/Vulnerability-Lookup entry for CVE-2025-66478 (cve.circl.lu)
Citations:
🌐 Web query:
CVE-2025-55184 CVE-2025-67779 React infinite loop DoS💡 Result:
CVE-2025-55184 and CVE-2025-67779 are high-severity (CVSS 7.5) denial-of-service (DoS) issues in React Server Components / Server Functions: a specially crafted HTTP request to a Server Function endpoint can trigger unsafe deserialization that leads to an infinite loop, pegging CPU and hanging the server process (pre-auth, no user interaction). CVE-2025-67779 exists because the original fix for CVE-2025-55184 was incomplete. [1][3]
What to do
Who is most likely affected
Sources: React security advisory (React.dev) [1], Fastly WAF virtual patch notice [2], Orca Security write-up [3].
🌐 Web query:
CVE-2026-23864 React vulnerability💡 Result:
CVE-2026-23864 is a high-severity (CVSS 7.5) denial-of-service (DoS) vulnerability in React Server Components (RSC). It can be triggered by specially crafted HTTP requests to Server Function endpoints, potentially causing server crashes, out-of-memory conditions, or excessive CPU usage. (react.dev)
What’s affected (React):
react-server-dom-webpack,react-server-dom-parcel,react-server-dom-turbopackWhat’s affected (Next.js / frameworks using RSC):
Am I affected if I only use React in the browser (no server / no RSC)?
What to do
Citations:
🌐 Web query:
CVE-2025-55182 CVSS score severity React 19.2.0💡 Result:
Sources: [1] [2] [3]
🌐 Web query:
React 19.2.4 CVE-2026-23864 patched versions 19.2.1 19.2.3💡 Result:
CVE-2026-23864 (DoS in React Server Components / Server Functions) affects the react-server-dom-* packages—not the “react” package in general—and 19.2.1 and 19.2.3 are still vulnerable (they were earlier/incomplete fixes). (react.dev)
Fixed (patched) versions:
Affected examples (19.2 line):
Citations:
🌐 Web query:
Next.js 16.1.6 CVE-2026-23864 patch💡 Result:
Next.js 16.1.6 is already patched for CVE-2026-23864—Vercel’s advisory lists 16.1.5 as the first fixed release in the 16.1 line, so anything ≥ 16.1.5 (including 16.1.6) is not affected. [1][2]
Patch / upgrade:
If you can’t move to 16.1.6 for some reason, the minimum safe target is next@16.1.5. [1][2]
🌐 Web query:
Next.js 16.1.5 16.1.6 CVE-2026-23864 patched versions💡 Result:
For CVE-2026-23864 in Next.js (App Router / Server Components), the Next.js 16.x patch levels are:
>= 16.0.0and< 16.1.5(so 16.1.4 and earlier are vulnerable). [1]16.0.11(for the 16.0.x line) [1]16.1.5(first fixed release for the 16.1.x line) [1][2]16.1.5is patched, and16.1.6(newer than 16.1.5) is also patched. [1][3]Sources: [1] GitHub Security Advisory (vercel/next.js) GHSA-h25m-26qc-wcjf, [2] Akamai advisory, [3] Next.js GitHub release tag v16.1.6.
Upgrade
reactandreact-domto19.2.4+— active RCE and DoS CVEs affect19.2.0The project uses
react@19.2.0/react-dom@19.2.0, which are confirmed vulnerable in multiple advisories that directly affect App Router server components like this page:19.2.1+19.2.4+19.2.4+The vulnerability is present in versions 19.0, 19.1.0, 19.1.1, and 19.2.0; initial fixes were incomplete through 19.2.3. A complete fix was issued in versions 19.0.4, 19.1.5, and 19.2.4.
Action: Upgrade
reactandreact-domto19.2.4+immediately. Next.js16.1.6already includes the patch for CVE-2026-23864 (patched from 16.1.5 onwards).🤖 Prompt for AI Agents