SvelteKit + Varlock


SSR loader

Data returned from a +page.server.ts load function.

Add ?leak=1 to leak SECRET_ITEM through the loader's returned data — varlock's server-response leak scanner should catch it.