From f3deba806dd8b43a0b94a37de832b504d6f787be Mon Sep 17 00:00:00 2001
From: Jake Jarvis <jake@jarv.is>
Date: Sun, 12 Oct 2025 14:11:04 -0400
Subject: [PATCH] Update PostHog reporting endpoints to use proxy for improved
 security

---
 middleware.ts  | 10 +++++-----
 next.config.ts |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/middleware.ts b/middleware.ts
index 5ccf3e8..feea20c 100644
--- a/middleware.ts
+++ b/middleware.ts
@@ -14,7 +14,7 @@ export function middleware(request: NextRequest) {
   if (path.length <= 1) {
     return NextResponse.next({
       headers: {
-        "x-middleware-verdict": "ignore",
+        "x-middleware-decision": "ignore",
       },
     });
   }
@@ -86,7 +86,7 @@ export function middleware(request: NextRequest) {
   if (!candidate) {
     return NextResponse.next({
       headers: {
-        "x-middleware-verdict": "ignore",
+        "x-middleware-decision": "ignore",
       },
     });
   }
@@ -96,7 +96,7 @@ export function middleware(request: NextRequest) {
   if (!registrable) {
     return NextResponse.next({
       headers: {
-        "x-middleware-verdict": "ignore",
+        "x-middleware-decision": "ignore",
       },
     });
   }
@@ -110,7 +110,7 @@ export function middleware(request: NextRequest) {
     url.hash = "";
     return NextResponse.redirect(url, {
       headers: {
-        "x-middleware-verdict": "redirect",
+        "x-middleware-decision": "redirect",
       },
     });
   }
@@ -118,7 +118,7 @@ export function middleware(request: NextRequest) {
   // Otherwise, it's already a bare registrable domain — proceed
   return NextResponse.next({
     headers: {
-      "x-middleware-verdict": "ok",
+      "x-middleware-decision": "ok",
     },
   });
 }
diff --git a/next.config.ts b/next.config.ts
index d23510f..83141b5 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -59,7 +59,7 @@ const nextConfig: NextConfig = {
                   base-uri 'self';
                   ${
                     process.env.NEXT_PUBLIC_POSTHOG_KEY
-                      ? `report-uri https://us.i.posthog.com/report/?token=${process.env.NEXT_PUBLIC_POSTHOG_KEY}; report-to posthog`
+                      ? `report-uri /_proxy/ingest/report/?token=${process.env.NEXT_PUBLIC_POSTHOG_KEY}; report-to posthog`
                       : ""
                   }
                 `
@@ -69,7 +69,7 @@ const nextConfig: NextConfig = {
               {
                 key: "Reporting-Endpoints",
                 value: process.env.NEXT_PUBLIC_POSTHOG_KEY
-                  ? `posthog="https://us.i.posthog.com/report/?token=${process.env.NEXT_PUBLIC_POSTHOG_KEY}"`
+                  ? `posthog="/_proxy/ingest/report/?token=${process.env.NEXT_PUBLIC_POSTHOG_KEY}"`
                   : "",
               },
             ],