Harden demo access and restore clean checks

2026-08-14 16:45:02 -04:00
parent 29d7b498ae
commit 66a53f25f2
10 changed files with 114 additions and 11 deletions
@@ -103,6 +103,9 @@ function PublicInvoiceView({ token }: { token: string }) {
          {/* Header */}
          <div className="flex items-center gap-3 bg-gray-900 px-8 py-6">
            {hasLogo && (
+              // Uploaded SVGs are sanitized and served by our route. next/image's
+              // optimizer intentionally rejects SVG, so a native img is required.
+              // eslint-disable-next-line @next/next/no-img-element
              <img
                src={`/api/business-logo/${invoice.business!.id}`}
                alt=""