fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115)

jackfromeast · web-flow · commit ade1d89660e1 · 2024-09-16T17:42:53.000+02:00
diff --git a/packages/vite/src/node/build.ts b/packages/vite/src/node/build.ts
@@ -1297,7 +1297,7 @@ const getRelativeUrlFromDocument = (relativePath: string, umd = false) =>
   getResolveUrl(
     `'${escapeId(partialEncodeURIPath(relativePath))}', ${
       umd ? `typeof document === 'undefined' ? location.href : ` : ''
-    }document.currentScript && document.currentScript.src || document.baseURI`,
+    }document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || document.baseURI`,
   )
 
 const getFileUrlFromFullPath = (path: string) =>

Original file line number	Diff line number	Diff line change
`@@ -1297,7 +1297,7 @@ const getRelativeUrlFromDocument = (relativePath: string, umd = false) =>`
`1297`	`1297`	`getResolveUrl(`
`1298`	`1298`	`'${escapeId(partialEncodeURIPath(relativePath))}', ${
`1299`	`1299`	umd ? `typeof document === 'undefined' ? location.href : ` : ''
`1300`		- }document.currentScript && document.currentScript.src \|\| document.baseURI`,
	`1300`	+ }document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src \|\| document.baseURI`,
`1301`	`1301`	`)`
`1302`	`1302`
`1303`	`1303`	`const getFileUrlFromFullPath = (path: string) =>`