Skip to content

Commit fab1c18

Browse files
jackfromeastpatak-dev
authored andcommitted
fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115)
1 parent 6566400 commit fab1c18

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

‎packages/vite/src/node/build.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1131,7 +1131,7 @@ const getRelativeUrlFromDocument = (relativePath: string, umd = false) =>
11311131
getResolveUrl(
11321132
`'${escapeId(partialEncodeURIPath(relativePath))}', ${
11331133
umd ? `typeof document === 'undefined' ? location.href : ` : ''
1134-
}document.currentScript && document.currentScript.src || document.baseURI`,
1134+
}document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || document.baseURI`,
11351135
)
11361136

11371137
const getFileUrlFromFullPath = (path: string) =>

0 commit comments

Comments
 (0)