# Next.js Security Review Checklist
- Validate all Server Action inputs with a schema before processing.
- Review middleware matchers and auth bypass paths.
- Confirm server-only data isnot passed into client components or serialized intopublic props.
- Check API routes for CSRF, auth, and rate limiting where applicable.