javascript|January 30, 2022|2 min read

Nextjs - Fixing Loading External Images and Issue of Url Paramater Not Allowed

TL;DR

Configure the images.domains array in next.config.js to whitelist external hostnames and resolve the 'URL parameter not allowed' error when using the Next.js Image component.

Nextjs - Fixing Loading External Images and Issue of Url Paramater Not Allowed

Introduction

In this post, we will see

  • How to load external images to your next.js website
  • Fixing issue of Url Parameter not allowed

Using Image component in Next.js

A general code to load image in next.js is

<Image
    src={this.props.article.image.url}
    height={400}
    width={700}
    alt={this.props.article.title}
    />

If this image url is same as your domain name, then its fine and you do not need to do anything else. But, if you are loading images from any other url like unsplash or s3.amazonaws.com, then it will not load it.

By default, Next.js does not allow you to load images from any other url. This is due to security implications. You should know from where you are loading images.

How to Load External Images

You need to configure this in next.config.js configuration file, often placed at the root folder of your project.

A sample file:

module.exports = {
  env: {
    NEXT_PUBLIC_API_URL:
      process.env.NEXT_PUBLIC_API_URL,
    ...some other properties
  },
  images: {
    domains: [
      'images.unsplash.com',
      's3.amazonaws.com'
    ],
  }
};

In this way, you are telling Next.js to load images from above mentioned two domains.

Your image source will become something like below:

/_next/image?url=https%3A%2F%2Fs3.amazonaws.com%2Ffiles.<my_bucket>.com%2Ffiles%2Farticles%2Fasian_garden_1a6667449c.jpg&w=1920&q=75

There is a catch here too. read next line.

Issue: Url Paramater Not Allowed

If you are deploying your application using Docker containers, then you will most probably face this issue again, even if you have used next.config.js.

When you load, you will see this error:

"url" parameter is not allowed

We generally take Dockerfile from the official sources, and there is this line commented:

# You only need to copy next.config.js if you are NOT using the default configuration
# COPY --from=builder /app/next.config.js ./

Just uncomment above COPY step, and re-build your container image. This should work.

Hope this helps.

Related Posts

Authenticating Strapi backend with Next.js and next-auth using credentials and jwt

Authenticating Strapi backend with Next.js and next-auth using credentials and jwt

Introduction Strapi is a backend system provides basic crud operations with…

Request Entity Too Large(413) - Uploading File with Formdata with Axios and Custom header

Request Entity Too Large(413) - Uploading File with Formdata with Axios and Custom header

Introduction I was trying to upload images to my backend using rest APIs. I was…

Nextjs - How to Build Next.js Application on Docker and Pass API Url

Nextjs - How to Build Next.js Application on Docker and Pass API Url

Introduction In this post we will see: How to prepare a docker image for your…

Nextjs - How to Redirect to Another Page and Pass State

Nextjs - How to Redirect to Another Page and Pass State

Introduction We have a page, for example a . And, upon submission we would want…

How to use Draft.js WYSWYG with Next.js and Strapi Backend, Edit/Update Saved Article

How to use Draft.js WYSWYG with Next.js and Strapi Backend, Edit/Update Saved Article

Introduction This post is in contuation of our previous post: How to use Draft…

How to use Draft.js WYSWYG with Next.js and Strapi Backend, Create and View Article with Image Upload

How to use Draft.js WYSWYG with Next.js and Strapi Backend, Create and View Article with Image Upload

Introduction In this post, we will use in Next.js with strapi. And, we will…

Latest Posts

Claude Code Skills — Build a Better Engineering Workflow with AI-Powered Code Reviews, Security Scans, and More

Claude Code Skills — Build a Better Engineering Workflow with AI-Powered Code Reviews, Security Scans, and More

Most developers use Claude Code like a search engine — ask a question, get an…

Building an AI Voicebot for Visitor Check-In — A Practical Guide to Handling the Messy Parts

Building an AI Voicebot for Visitor Check-In — A Practical Guide to Handling the Messy Parts

Every office lobby has the same problem: a visitor walks in, nobody’s at the…

Server Security Best Practices — Complete Hardening Guide for Production Systems

Server Security Best Practices — Complete Hardening Guide for Production Systems

Every breach post-mortem tells the same story: an unpatched service, a…

Staff Engineer Study Plan for MAANG Interviews — The Complete 12-Week Roadmap

Staff Engineer Study Plan for MAANG Interviews — The Complete 12-Week Roadmap

If you’re a Senior Engineer (L5) preparing for Staff (L6+) roles at MAANG…

XSS and CSRF Explained — The Complete Guide with Real Attack Examples and Defenses

XSS and CSRF Explained — The Complete Guide with Real Attack Examples and Defenses

XSS and CSRF have been in the OWASP Top 10 for over a decade. They’re among the…

OWASP Top 10 (2021) — Every Vulnerability Explained with Code

OWASP Top 10 (2021) — Every Vulnerability Explained with Code

The OWASP Top 10 is the industry standard for web application security risks. If…