Skip to main content

Tahir Nazir — blog homeTahir NazirEngineering notes

Articles Portfolio Games

Tahir Nazir

Engineering notes on AI systems, web architecture, and shipping product.

Topics

AI Engineering
Web Development

#Claude Code
#Troubleshooting
#AI Agents
#Developer Tools
#Enterprise
#Security
#Next.js
#Windows
#Networking
#Auto Mode

Elsewhere

Portfolio
Case studies
Games
Hire me

© 2026 Tahir Nazir

Home
Blog
Web Development

Web Development

Web platform work outside the AI stack: Next.js 16 build and Turbopack errors, fonts behind corporate proxies, the technical SEO fixes that got a Next.js site indexed, and the patched versions for critical Next.js, Node.js and PHP vulnerabilities.

Articles in this category

Next.js Vulnerability (October 2026): Two Critical RCEs Fixed in 16.4.1, Plus the Node.js and PHP Patches
Next.js 16.4.1 and 15.5.28 fix two critical unauthenticated RCEs (use cache and Image Optimization) and a Server Actions DoS. The same month, Node.js fixed a high-severity Brotli RCE (CVE-2026-111497) and PHP fixed two critical ones (CVE-2026-109618 and CVE-2026-109619). Which versions are affected, the 10-second checks I ran on my own stack, and which lines get no fix at all.How-toWeb DevelopmentOctober 25, 202617 min read
[WinError 10013] 'Access a Socket in a Way Forbidden': Windows Reserved the Port
Your port is free, netstat shows nothing on it, and Windows still refuses it with 'forbidden by its access permissions'. I reproduced it in Node and Python: the port sits in a range Windows has reserved, and here's how to see the list and get the port back.TroubleshootingWeb DevelopmentOctober 10, 202614 min read
Corporate Proxy SSL Errors in npm, pip, git and curl: What Each Tool Actually Trusts
I put npm, pip, Python, git and curl behind an intercepting proxy and tested every certificate setting. Half the usual fixes are silently ignored, and half the ones that work break your tools the moment you leave the office.TroubleshootingWeb DevelopmentOctober 8, 202613 min read
Next.js 'Failed to Fetch' Google Fonts Behind a Corporate Proxy: I Tested Every Fix
NODE_EXTRA_CA_CERTS fixes it under webpack and does nothing under Turbopack. I ran nine builds through an intercepting proxy on Next.js 16.1 and 16.3 — the fix that works depends on your version.TroubleshootingWeb DevelopmentOctober 2, 202611 min read
Next.js 16 Turbopack webpack Config Error: Don't Silence It
Next.js 16 fails the build when it finds a webpack config, and the error suggests turbopack: {}. I tested it. The build passes — and the service worker silently disappears.TroubleshootingWeb DevelopmentSeptember 25, 202610 min read
Next.js Site Not Indexed? What Took Mine From 21 to 54 Pages
Google had found 22 of my pages and refused to crawl them. Six Next.js mistakes caused it — including one that made every date in my sitemap a lie.TroubleshootingWeb DevelopmentSeptember 14, 202612 min read

More topics

AI Engineering
#Claude Code
#Troubleshooting
#AI Agents
#Developer Tools
#Enterprise
#Security
#Next.js
#Windows
#Networking
#Auto Mode
#Cost Optimization
#MCP