Skip to content

@sveltejs/kit@2.70.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 12:28
· 1064 commits to main since this release
@sveltejs/kit@2.70.4
70a5ad2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (#17620)

  • fix: escape cache-control headers in prerendered HTML (#17620)

  • fix: prevent path traversal when previewing prerendered pages and data on Windows (#17620)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (#17620)

  • fix: prevent server-side self-fetch fallbacks from following redirects (#17620)

Assets 2
Loading