From 26589033e4489f591f3dfcf49565b259afd7ac13 Mon Sep 17 00:00:00 2001
From: Haoqun Jiang <haoqunjiang@gmail.com>
Date: Mon, 11 Oct 2021 22:09:25 +0800
Subject: [PATCH] fix: do not output user-input url params directly to the
 response html

---
 packages/@vue/cli-ui/apollo-server/connectors/client-addons.js | 2 +-
 packages/@vue/cli-ui/apollo-server/connectors/plugins.js       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js b/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js
index 46b8c5439e..d1b150d4c0 100644
--- a/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js
+++ b/packages/@vue/cli-ui/apollo-server/connectors/client-addons.js
@@ -63,7 +63,7 @@ function serve (req, res) {
     }
   } else {
     res.status(404)
-    res.send(`Addon ${id} not found in loaded addons. Try opening a vue-cli project first?`)
+    res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')
   }
 }
 
diff --git a/packages/@vue/cli-ui/apollo-server/connectors/plugins.js b/packages/@vue/cli-ui/apollo-server/connectors/plugins.js
index a5fc453d9a..d3e74cde1a 100644
--- a/packages/@vue/cli-ui/apollo-server/connectors/plugins.js
+++ b/packages/@vue/cli-ui/apollo-server/connectors/plugins.js
@@ -648,7 +648,7 @@ function serveFile ({ pluginId, projectId = null, file }, res) {
   }
 
   res.status(404)
-  res.send(`Addon ${pluginId} not found in loaded addons. Try opening a vue-cli project first?`)
+  res.send('Addon not found in loaded addons. Try opening a vue-cli project first?')
 }
 
 function serve (req, res) {