sveltekit-spa

Security review and hardening guidance for a SvelteKit SPA with Supabase Auth, Postgres with RLS, and client-side rendering. Use when writing auth flows, adding RLS policies, handling user input, working with environment variables, reviewing code for vulnerabilities, hardening a feature, or when the user asks about security, XSS, CSRF, authorization, data exposure, or safe coding practices.