vite: Vite has an `server.fs.deny` bypass with an invalid `request-target` · Teire