parent
f56b707cb7
commit
7d1e6b9451
|
|
@ -5,8 +5,6 @@
|
|||
import type { Handle } from '@sveltejs/kit';
|
||||
import { json, text } from '@sveltejs/kit';
|
||||
|
||||
import Logs from "$lib/server/log"
|
||||
|
||||
/**
|
||||
* CSRF protection middleware for SvelteKit.
|
||||
*
|
||||
|
|
@ -30,8 +28,6 @@ export function csrf(allowedPaths: string[], allowedOrigins: string[] = []): Han
|
|||
!allowedPaths.includes(url.pathname); // Path is not explicitly allowed
|
||||
|
||||
if (forbidden) {
|
||||
Logs.route.warn("Blocked request due to csrf violation")
|
||||
|
||||
const message = `Cross-site ${request.method} form submissions are forbidden`;
|
||||
if (request.headers.get('accept') === 'application/json') {
|
||||
return json({ message }, { status: 403 });
|
||||
|
|
|
|||
Loading…
Reference in New Issue