Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

Summary The first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Impact Only apps that match one of the following conditions are affected: - explicitly expose the Vite dev server to the network using --host or the...