import { NextRequest, NextResponse } from "next/server"; export function middleware(request: NextRequest) { const { pathname } = request.nextUrl; const decodedPath = decodeURIComponent(pathname); if (decodedPath.includes("..")) { return new NextResponse("Bad Request", { status: 400 }); } return NextResponse.next(); } export const config = { matcher: "/:path*", };