Skip to content

v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@danielmitd danielmitd released this 28 Dec 09:45
v0.1.0
9a915b0
This commit was signed with the committer’s verified signature.
danielmitd Daniel Hartmann
SSH Key Fingerprint: 6a0Uer8XuXUcRZ9u7XZtnOUCCNh3OhdJSCylEH6kky4
Verified
Learn about vigilant mode.

Initial Release

CSRF protection hook for SvelteKit using Sec-Fetch-Site header with Origin fallback.

Features

  • Uses Sec-Fetch-Site header (browser-set, unforgeable)
  • Falls back to Origin header for older browsers
  • Configurable: allowSameSite, excludePaths, protectPaths, allowedOrigins
  • Custom rejection handler support via onReject
  • Returns JSON or text 403 response based on Accept header

Installation

npm install @healthycodin/kit-csrf-header

See README for usage instructions.

Assets 2
Loading