kit icon indicating copy to clipboard operation
kit copied to clipboard

fix(adapter-node): validate ORIGIN env var at startup (#14978)

Open KiraPC opened this issue 2 weeks ago • 2 comments

  • Add parse_origin() utility to validate and normalize origin URLs
  • Server now fails fast with clear error for invalid ORIGIN
  • Automatically normalize default ports and strip path/query/hash
  • Add tests for origin validation

Closes #14978


Please don't delete this checklist! Before submitting the PR, please make sure you do the following:

  • [x] It's really useful if your PR references an issue where it is discussed ahead of time. In many cases, features are absent for a reason. For large changes, please create an RFC: https://github.com/sveltejs/rfcs
  • [x] This message body should clearly illustrate what problems it solves.
  • [ ] Ideally, include a test that fails without this PR but passes with it.

Tests

  • [x] Run the tests with pnpm test and lint the project with pnpm lint and pnpm check

Changesets

  • [x] If your PR makes a change that should be noted in one or more packages' changelogs, generate a changeset by running pnpm changeset and following the prompts. Changesets that add features should be minor and those that fix bugs should be patch. Please prefix changeset messages with feat:, fix:, or chore:.

Edits

  • [x] Please ensure that 'Allow edits from maintainers' is checked. PRs without this option may be closed.

KiraPC avatar Dec 09 '25 14:12 KiraPC

🦋 Changeset detected

Latest commit: c2b900f7cc00ae59ba3e464d4f1c3e5992a8e12c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@sveltejs/adapter-node Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

changeset-bot[bot] avatar Dec 09 '25 14:12 changeset-bot[bot]

⚠️ No Changeset found

Latest commit: c754c30

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Added the changeset

KiraPC avatar Dec 09 '25 15:12 KiraPC