feat: mise à jour sécurité CVE-2025-55182 (Next.js 15.5.7, React 19.1.2)

lib/getAds.ts

@@ -0,0 +1,10 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+
+const IMG_EXT = /\.(png|jpe?g|gif|webp|avif|svg)$/i;
+
+export async function getAdFiles(): Promise<string[]> {
+  const dir = path.join(process.cwd(), "public", "ads");
+  const files = await fs.readdir(dir);
+  return files.filter((f) => IMG_EXT.test(f));
+}

lib/prisma.ts

@@ -0,0 +1,13 @@
+import { PrismaClient } from "@prisma/client";
+
+const globalForPrisma = globalThis as unknown as {
+  prisma: PrismaClient | undefined;
+};
+
+export const prisma =
+  globalForPrisma.prisma ??
+  new PrismaClient({
+    log: ["error", "warn"],
+  });
+
+if (process.env.NODE_ENV !== "production") globalForPrisma.prisma = prisma;

lib/validators/project.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+
+export const projectSchema = z.object({
+  id: z.string().uuid(),
+  joueur: z.string(),
+  projet: z.string(),
+  description: z.string(),
+  coords: z.string().nullable(),
+  etat: z.enum(["En cours", "Terminé", "Pause"]),
+  monde: z.enum(["Overworld", "Nether", "End"]),
+  tags: z.array(z.string()),
+  createdAt: z.date().or(z.string().transform((s) => new Date(s))),
+});
+
+export type SafeProject = z.infer<typeof projectSchema>;