# Next.js Example – Introduced Issues This example intentionally includes the following findings for reconciliation: - A11Y001: <img> without alt - A11Y006: <img> without width/height - A11Y004: <div onClick> (no keyboard accessibility) - SEC016: eval() - SEC008: process.env.FOO || 'fallback' - JSNET001: fetch() without AbortController/signal - SEC002/SEC004: Hardcoded Supabase URL - SEC005: Hardcoded Supabase key - COOKIE001: Set-Cookie without HttpOnly/Secure/SameSite