Tag reverse proxy attack surface