diff --git a/sites/svelte.dev/src/routes/(authed)/+layout.svelte b/sites/svelte.dev/src/routes/(authed)/+layout.svelte
index 3d2585c7ef..b3c90243eb 100644
--- a/sites/svelte.dev/src/routes/(authed)/+layout.svelte
+++ b/sites/svelte.dev/src/routes/(authed)/+layout.svelte
@@ -11,6 +11,7 @@
 			);
 
 			window.addEventListener('message', function handler(event) {
+				if (event.data.source !== 'svelte-auth') return;
 				login_window.close();
 				window.removeEventListener('message', handler);
 				invalidateAll();
diff --git a/sites/svelte.dev/src/routes/auth/callback/+server.js b/sites/svelte.dev/src/routes/auth/callback/+server.js
index 0308da2f55..161e04a9f1 100644
--- a/sites/svelte.dev/src/routes/auth/callback/+server.js
+++ b/sites/svelte.dev/src/routes/auth/callback/+server.js
@@ -33,13 +33,13 @@ export async function GET({ url }) {
 			github_login: profile.login,
 			github_avatar_url: profile.avatar_url
 		};
-
 		const { sessionid, expires } = await session.create(user);
 
 		return new Response(
 			`
 			<script>
 				window.opener.postMessage({
+					source: 'svelte-auth',
 					user: ${uneval(user)}
 				}, window.location.origin);
 			</script>
diff --git a/sites/svelte.dev/src/routes/auth/login/+server.js b/sites/svelte.dev/src/routes/auth/login/+server.js
index 4ed7a763c9..f2f00d6854 100644
--- a/sites/svelte.dev/src/routes/auth/login/+server.js
+++ b/sites/svelte.dev/src/routes/auth/login/+server.js
@@ -12,7 +12,7 @@ export const GET = client_id
 				}).toString();
 
 			redirect(302, Location);
-	  }
+		}
 	: () =>
 			new Response(
 				`