fix regression

packages/nextjs/src/common/utils/dropMiddlewareTunnelRequests.ts

@@ -59,7 +59,7 @@ function isTunnelRouteSpan(spanAttributes: Record<string, unknown>): boolean {
     // Extract pathname from the target (e.g., "/tunnel?o=123&p=456" -> "/tunnel")
     const pathname = httpTarget.split('?')[0] || '';
 
-    return pathname.startsWith(tunnelPath);
+    return pathname === tunnelPath || pathname.startsWith(`${tunnelPath}/`);
   }
 
   return false;

packages/nextjs/test/utils/dropMiddlewareTunnelRequests.test.ts

@@ -71,6 +71,18 @@
       expect(span.setAttribute).not.toHaveBeenCalled();
     });
 
+    it('does not mark BaseServer.handleRequest span for dropping when http.target shares tunnel path prefix', () => {
+      globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
+      const span = createMockSpan();
+
+      dropMiddlewareTunnelRequests(span as any, {
+        'next.span_type': 'BaseServer.handleRequest',
+        'http.target': '/monitoring-dashboard',
+      });
+
+      expect(span.setAttribute).not.toHaveBeenCalled();
+    });
+
     it('does not mark BaseServer.handleRequest span when no tunnel path is configured', () => {
       const span = createMockSpan();
 
@@ -126,7 +138,7 @@
   describe('skipOpenTelemetrySetup', () => {
     it('does not process spans when skipOpenTelemetrySetup is true', async () => {
       const core = await import('@sentry/core');
       const originalGetClient = core.getClient;
       vi.spyOn(core, 'getClient').mockReturnValueOnce({
         getOptions: () => ({ skipOpenTelemetrySetup: true }),
       } as any);