---
title: "对生产环境 Next.js 和 Stripe 应用的外部泄漏检查"
url: "https://reamcp.dev/zh-cn/cases/outside-in-leak-check-of-a-production-next-js-and-stripe-app-825575"
source: "https://github.com/morluto/rea/discussions/1406"
source_type: "github-discussion"
author: "gold567200"
author_handle: "gold567200"
stars: 0
category: "安全与恶意软件分析（防御）"
categories: ["security-defense"]
tags: []
added: "2026-10-12T22:38:05.241Z"
updated: "2026-10-13T00:26:30Z"
locale: "zh-cn"
content_locale: "zh-cn"
---

# 对生产环境 Next.js 和 Stripe 应用的外部泄漏检查

对作者自己门户的黑盒审计：匿名访问者能看到什么，应用会泄露什么，使用 REA 从外部进行检查。

## Description

列入原因：对作者自己生产系统的防御性审计。

## Original README

A black-box audit of the author's own portal: what can an anonymous visitor see, and what does the app leak, checked with REA from the outside.

Why it is listed: Defensive audit of the author's own production system.