The post from the reporters is much more useful for this: https://zhero-web-sec.github.io/research-and-things/nextjs-a...