2026-04-18 · 5 min
Next.js 16 broke my blog. The fix was three lines, the lesson was bigger.
Vercel blocked my deploy over an RCE advisory, the upgrade introduced a new default that silently stripped JSX props, and it took a few hours to find the two config flags.
nextmdxmigration