path traversal vulnerability

[vinnitu]

Hi, how to prevent such behavior?

npm init @vitejs/app vite-path-traversal-vulnerability
cd vite-path-traversal-vulnerability
npm i
npm run dev

what do you see in response ?

curl http://localhost:3000/etc/passwd

[ygj6]

Hi @vinnitu , this URL shows the demo page.
Do you mean that 404 is not returned when there is no url path?

[vinnitu]

I mean it shows me contain passwd file.

[antfu]

Duplicated of #2820, where it fix is merged in #2850, which will be released in next monday