Vitest: Windows Backslash Traversal Bypasses The @vitest/mocker Redirect Allowlist Fix

Summary The path traversal fix released for "GHSA-82fw-gwwq-j7x9" https://github.com/vitest-dev/vitest/security/advisories/GHSA-82fw-gwwq-j7x9 can be bypassed on Windows by using a backslash in the redirect URL pathname. The fixed code joins an attacker-controlled URL pathname with the Vite root...