From f3643d8e74db07a0c3014987e8c87d4fec31f5a9 Mon Sep 17 00:00:00 2001 From: Anthony Fu Date: Mon, 28 Jun 2021 06:05:50 +0800 Subject: [PATCH] chore: update changelog --- packages/vite/CHANGELOG.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/packages/vite/CHANGELOG.md b/packages/vite/CHANGELOG.md index 560765492790e2..949bb42c1f0b32 100644 --- a/packages/vite/CHANGELOG.md +++ b/packages/vite/CHANGELOG.md @@ -1,5 +1,26 @@ # [2.4.0-beta.0](https://github.com/vitejs/vite/compare/v2.3.8...v2.4.0-beta.0) (2021-06-27) +### BREAKING CHANGES + +- **server:** `server.fsServe` renamed to `server.fs` ([#3965](https://github.com/vitejs/vite/pull/3965)) +- **server:** `server.fs.root` deprecated in favor of `server.fs.allow` ([#3968](https://github.com/vitejs/vite/pull/3968)) + +### Security + +We have improved the file serving boundaries detection with ([#3784](https://github.com/vitejs/vite/issues/3784)). While it's still experimental and **disabled by default**, you can opt-in it by + +```js +// vite.config.js +export default { + server: { + fs: { + strict: true + } + } +} +``` + +It should smartly serve the files related to your project (directly imported, linked deps, etc.) while denying the rest. If you find any false-negative, please [open an issue](https://github.com/vitejs/vite/issues/new?assignees=&labels=pending+triage&template=bug_report.yml) with reproduction to report. ### Bug Fixes