7d79284fd7
- start.sh: builds and launches Node production server on 192.168.0.94:4078 - Multi-domain CSRF: not needed — SvelteKit natively passes when Origin matches Host - hooks.server.ts: minimal stub with explanation - svelte.config.js: reverted csrf experiment (not supported in this version)
5 lines
266 B
TypeScript
5 lines
266 B
TypeScript
// hooks.server.ts intentionally minimal — CSRF is handled natively by SvelteKit
|
|
// when the Origin header matches the request Host. For multi-domain setups,
|
|
// trusted origins are declared in svelte.config.js via kit.csrf.checkOrigin / allowedOrigins.
|
|
export {};
|