What — Prerendered HTML can ship absolute http://127.0.0.1:<port> asset links; strip the local prerender-server origin from captured HTML and fail the build if any leak remains.
Why — Vite's __vitePreload absolutizes lazy-chunk deps via import.meta.resolve against the local prerender-server origin, so a prerendered page can reference an internal URL that is dead in production and leaks build internals.
Scope
renderRoute(): sanitize captured HTML — strip https?://(127.0.0.1|localhost):<port> (static chunks stay relative already; stripping the origin yields the same root-relative form).- Fail-hard build assert AFTER the fail-soft render try/catch: re-read each written prerendered file, throw if the leak pattern remains (a render hiccup stays fail-soft; a leaked internal URL never ships).
- Unit tests for both behaviors.
First observed on a downstream consumer's release build; fix is generic to the stack prerender plugin.
Scope: validated 2026-07-24
Created via /dev:issue
What — Prerendered HTML can ship absolute
http://127.0.0.1:<port>asset links; strip the local prerender-server origin from captured HTML and fail the build if any leak remains.Why — Vite's
__vitePreloadabsolutizes lazy-chunk deps viaimport.meta.resolveagainst the local prerender-server origin, so a prerendered page can reference an internal URL that is dead in production and leaks build internals.Scope
renderRoute(): sanitize captured HTML — striphttps?://(127.0.0.1|localhost):<port>(static chunks stay relative already; stripping the origin yields the same root-relative form).First observed on a downstream consumer's release build; fix is generic to the stack prerender plugin.
Scope: validated 2026-07-24
Created via /dev:issue