fix: backport #18115, DOM Clobbering in

jackfromeast · patak-dev · commit 2ddd8541ec3b · 2024-09-17T09:17:14.000+02:00
diff --git a/packages/vite/src/node/build.ts b/packages/vite/src/node/build.ts
@@ -1005,7 +1005,7 @@ const getRelativeUrlFromDocument = (relativePath: string, umd = false) =>
   getResolveUrl(
     `'${relativePath}', ${
       umd ? `typeof document === 'undefined' ? location.href : ` : ''
-    }document.currentScript && document.currentScript.src || document.baseURI`
+    }document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || document.baseURI`
   )
 
 const relativeUrlMechanisms: Record<

Original file line number	Diff line number	Diff line change
`@@ -1005,7 +1005,7 @@ const getRelativeUrlFromDocument = (relativePath: string, umd = false) =>`
`1005`	`1005`	`getResolveUrl(`
`1006`	`1006`	`'${relativePath}', ${
`1007`	`1007`	umd ? `typeof document === 'undefined' ? location.href : ` : ''
`1008`		- }document.currentScript && document.currentScript.src \|\| document.baseURI`
	`1008`	+ }document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src \|\| document.baseURI`
`1009`	`1009`	`)`
`1010`	`1010`
`1011`	`1011`	`const relativeUrlMechanisms: Record<`