Skip to content

breaking: remove the deprecated CSRF option#15437

Merged
elliott-with-the-longest-name-on-github merged 1 commit intoversion-3from
rm-checkOrigin
Feb 26, 2026
Merged

breaking: remove the deprecated CSRF option#15437
elliott-with-the-longest-name-on-github merged 1 commit intoversion-3from
rm-checkOrigin

Conversation

@benmccann
Copy link
Member

@benmccann benmccann commented Feb 26, 2026

Left it in the types so that it shows up in the reference docs for users who are still on SvelteKit 2

@changeset-bot
Copy link

changeset-bot bot commented Feb 26, 2026

🦋 Changeset detected

Latest commit: 3f4d01a

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@sveltejs/kit Major

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@benmccann benmccann added this to the 3.0 milestone Feb 26, 2026
@svelte-docs-bot
Copy link

Copy link
Contributor

@vercel vercel bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Additional Suggestions:

  1. Test file expects checkOrigin: true in defaults but the option was removed, causing test assertion failures
  1. Test configurations still use checkOrigin: true which has been changed from deprecated to removed, causing config validation to throw an error.
Fix on Vercel

@benmccann benmccann force-pushed the rm-checkOrigin branch 2 times, most recently from 43f85fb to 5ab443b Compare February 26, 2026 21:58
@elliott-with-the-longest-name-on-github elliott-with-the-longest-name-on-github merged commit 87603d1 into version-3 Feb 26, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants