A massive security vulnerability was just uncovered in Next.js and it breaks the authentication of many major applications. In this video I explain what this vulnerability is, show how it works, and most importantly explain what you can do to protect yourself from situations like this happening in the future.
? Materials/References:
In Depth Article On Vulnerability: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware
? Find Me Here:
My Blog: https://blog.webdevsimplified.com
My Courses: https://courses.webdevsimplified.com
Patreon: https://www.patreon.com/WebDevSimplified
Twitter: https://twitter.com/DevSimplified
Discord: https://discord.gg/7StTjnR
GitHub: https://github.com/WebDevSimplified
CodePen: https://codepen.io/WebDevSimplified
⏱️ Timestamps:
00:00 - Introduction
00:55 - Code Demo
02:28 - Security Exploit Explained
07:10 - Takeaways
08:37 - Better Way To Do Auth
#NextJS #WDS #WebSecurity