Broken image in "Userland Migrations"

[efekrskl]

Affected URL

https://nodejs.org/en/learn/getting-started/userland-migrations

Describe the issue in detail:

There seems to be a broken image in https://nodejs.org/en/learn/getting-started/userland-migrations

Works fine locally. I can see there's a 403 in dev tools, probably the pattern inside next config (remotePatterns) doesn't match

Solution

Copy this file form userland-migration to website assets & update the markdown

[AugustinMauroy]

https://nodejs.org/_next/image?url=https%3A%2F%2Fraw.githubusercontent.com%2Fnodejs%2Fuserland-migrations%2F8fd9c141a118c4b64cc37eed8e663005cbc819ac%2F.github%2Fassets%2FUserland-Migration-Tagline.png&w=3840&q=75 send a 403 through Cloudflare ...

[avivkeller]

@nodejs/web-infra

[MattIPv4]

Filtered https://dash.cloudflare.com/07be8d2fbc940503ca1be344714cb0d1/nodejs.org/analytics/instant-logs down to ClientRequestPath starts with /_next/image and captured my request, 'tis getting blocked by Cloudflare's WAF:

    "RayID": "999e726b0f190038",
    "SecurityRuleID": "23548ee2b36547a1be09bb2c0550c529",
    "SecurityAction": "block",
    "SecurityActions": [
        "block"
    ],
    "SecurityRuleIDs": [
        "23548ee2b36547a1be09bb2c0550c529"
    ],
    "SecuritySources": [
        "firewallManaged"
    ],
    "SecurityRuleDescription": "Version Control - Information Disclosure",
    "SecurityLevel": "unk",

[MattIPv4]

I've filed a support ticket with Cloudflare to flag this to them (01823204).

[MattIPv4]

@AugustinMauroy I suspect you can get around this by not having the image in the .github directory, as I think this WAF rule is seeing .git in the URL and blocking it based on that?

[AugustinMauroy]

@AugustinMauroy I suspect you can get around this by not having the image in the .github directory, as I think this WAF rule is seeing .git in the URL and blocking it based on that?

Why not ? but on userland migration side the .github dir is a good way to store it

[MattIPv4]

👍 Okay, don't move it and we can wait until Cloudflare support get back to us.