mirror of
https://github.com/clusterio/clusterio.git
synced 2026-11-12 23:04:52 +09:00
Vite serves any file under fs.allow through /@fs/, and the default allow list is the workspace root. In a clusterio checkout that is also the usual data directory, so with --dev any client that could reach the controller could fetch config-controller.json, config-ctl.json and the database without logging in. webpack-dev-middleware only served the compiled bundles. Allow the controller, web_ui, lib and dev plugin directories and the node_modules directories Node.js would resolve their imports from. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>