fix: do not output user-input url params directly to the response html

haoqunjiang · haoqunjiang · commit 1ad379e34f95 · 2021-10-13T17:06:18.000+08:00
diff --git a/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js b/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js
@@ -63,7 +63,7 @@ function serve (req, res) {
     }
   } else {
     res.status(404)
-    res.send(`Addon ${id} not found in loaded addons. Try opening a vue-cli project first?`)
+    res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')
   }
 }
 
diff --git a/packages/@vue/cli-ui/apollo-server/connectors/plugins.js b/packages/@vue/cli-ui/apollo-server/connectors/plugins.js
@@ -648,7 +648,7 @@ function serveFile ({ pluginId, projectId = null, file }, res) {
   }
 
   res.status(404)
-  res.send(`Addon ${pluginId} not found in loaded addons. Try opening a vue-cli project first?`)
+  res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')
 }
 
 function serve (req, res) {

Original file line number	Diff line number	Diff line change
`@@ -63,7 +63,7 @@ function serve (req, res) {`
`63`	`63`	`}`
`64`	`64`	`} else {`
`65`	`65`	`res.status(404)`
`66`		- res.send(`Addon ${id} not found in loaded addons. Try opening a vue-cli project first?`)
	`66`	`+ res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')`
`67`	`67`	`}`
`68`	`68`	`}`
`69`	`69`
Original file line number	Diff line number	Diff line change
`@@ -648,7 +648,7 @@ function serveFile ({ pluginId, projectId = null, file }, res) {`
`648`	`648`	`}`
`649`	`649`
`650`	`650`	`res.status(404)`
`651`		- res.send(`Addon ${pluginId} not found in loaded addons. Try opening a vue-cli project first?`)
	`651`	`+ res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')`
`652`	`652`	`}`
`653`	`653`
`654`	`654`	`function serve (req, res) {`