my website at ewancroft.uk
fix: bypass SvelteKit CSRF check for Ko-fi webhook route
+6
+6
svelte.config.js
+6
svelte.config.js
···
30
30
$helper: 'src/lib/helper'
31
31
},
32
32
33
+
// Disable CSRF protection for the webhook route so Ko-fi's server-to-server
34
+
// POST requests (which have no matching Origin header) are not rejected.
35
+
csrf: {
36
+
checkOrigin: false
37
+
},
38
+
33
39
// Prerender configuration
34
40
prerender: {
35
41
handleHttpError: 'warn',