From 6bd6b16d95a117231f656bb21008c1cac75e93f2 Mon Sep 17 00:00:00 2001 From: Daniel Diekmeier Date: Sun, 21 Sep 2025 00:13:44 +0200 Subject: [PATCH 1/3] Fix __SVELTEKIT_PAYLOAD__ access --- packages/kit/src/runtime/client/client.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/kit/src/runtime/client/client.js b/packages/kit/src/runtime/client/client.js index 75294d5a0aea..e1383ca8ad2a 100644 --- a/packages/kit/src/runtime/client/client.js +++ b/packages/kit/src/runtime/client/client.js @@ -291,8 +291,8 @@ export async function start(_app, _target, hydrate) { ); } - if (__SVELTEKIT_PAYLOAD__.data) { - remote_responses = __SVELTEKIT_PAYLOAD__?.data; + if (__SVELTEKIT_PAYLOAD__?.data) { + remote_responses = __SVELTEKIT_PAYLOAD__.data; } // detect basic auth credentials in the current URL From 06e648e040b20d58ba5bb9125f4c5357b7157546 Mon Sep 17 00:00:00 2001 From: Daniel Diekmeier Date: Sun, 21 Sep 2025 00:18:29 +0200 Subject: [PATCH 2/3] Add changeset --- .changeset/late-dodos-move.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/late-dodos-move.md diff --git a/.changeset/late-dodos-move.md b/.changeset/late-dodos-move.md new file mode 100644 index 000000000000..99e807a88534 --- /dev/null +++ b/.changeset/late-dodos-move.md @@ -0,0 +1,5 @@ +--- +'@sveltejs/kit': patch +--- + +Fix `__SVELTEKIT_PAYLOAD__.data` access again From 2e75439c48b0c710f4a7c44c7ec144647008e7e4 Mon Sep 17 00:00:00 2001 From: Daniel Diekmeier Date: Sun, 21 Sep 2025 00:23:26 +0200 Subject: [PATCH 3/3] Update changeset with PR title --- .changeset/late-dodos-move.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.changeset/late-dodos-move.md b/.changeset/late-dodos-move.md index 99e807a88534..65fdc5607e64 100644 --- a/.changeset/late-dodos-move.md +++ b/.changeset/late-dodos-move.md @@ -2,4 +2,4 @@ '@sveltejs/kit': patch --- -Fix `__SVELTEKIT_PAYLOAD__.data` access again +ensure `__SVELTEKIT_PAYLOAD__.data` access is safe