fix: strip internal routing headers from dev server responses (#149)

Strip all x-middleware-* prefixed headers from responses in both the App Router and Pages Router dev servers before sending to clients. These headers are internal routing signals (x-middleware-next, x-middleware-rewrite, x-middleware-override-headers, etc.) and should not be visible to end users. The prod server already stripped these correctly. This brings the dev servers into parity.

Steve Faulkner committed on Feb 27, 2026, 02:05 AM

Showing 3 changed files +35 additions -3 deletions

M packages/vinext/src/index.ts +4 -2

M packages/vinext/src/server/app-dev-server.ts +5 -1

M tests/app-router.test.ts +26