next js security issue reddit