chore: update docs

vitejs · antfu · May 7, 2021 · Apr 4, 2021 · Apr 4, 2021 · Apr 4, 2021
commit f47345b21a86f45defd84ecfe2214d759e0b8774
diff --git a/docs/config/index.md b/docs/config/index.md
@@ -420,6 +420,14 @@ export default async ({ command, mode }) => {
 
   File system watcher options to pass on to [chokidar](https://github.com/paulmillr/chokidar#api).
 
+### server.fsServeRoot
+
+- **Type:** `string`
+
+  Restrict files that could be served via `/@fs/`. Acessing files outside this directory will result a 403.
+
+  Default to [project root](/guide/#index-html-and-project-root).
+
 ## Build Options
 
 ### build.target

diff --git a/packages/vite/src/node/server/index.ts b/packages/vite/src/node/server/index.ts
@@ -122,8 +122,10 @@ export interface ServerOptions {
   base?: string
   /**
    * Restrict files that could be served via '/\@fs/'.
+   * Acessing files outside this directory will result a 403.
    *
-   * Default to the project root (`config.root`).
+   * Accepts absolute path or a path relative to project root.
+   * Default to the project root.
    */
   fsServeRoot?: string
 }

diff --git a/packages/vite/src/node/server/middlewares/static.ts b/packages/vite/src/node/server/middlewares/static.ts
@@ -77,7 +77,10 @@ export function serveRawFsMiddleware(
 ): Connect.NextHandleFunction {
   const isWin = os.platform() === 'win32'
   const serveFromRoot = sirv('/', sirvOptions)
-  const root = config.server?.fsServeRoot || config.root
+  const root = path.resolve(
+    config.root,
+    config.server?.fsServeRoot || config.root
+  )
 
   return (req, res, next) => {
     let url = req.url!