fix: add script tag validation (#1314)

Author: benhoad

assets/cjs_shims.js

@@ -3,10 +3,11 @@
 // if we export it as `const importMetaUrl = ... __filename ...`
 // But using a function will not cause this issue
 
-const getImportMetaUrl = () =>
-  typeof document === 'undefined'
-    ? new URL(`file:${__filename}`).href
-    : (document.currentScript && document.currentScript.src) ||
-      new URL('main.js', document.baseURI).href
+const getImportMetaUrl = () => 
+  typeof document === "undefined" 
+    ? new URL(`file:${__filename}`).href 
+    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') 
+      ? document.currentScript.src 
+      : new URL("main.js", document.baseURI).href;
 
 export const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()