fix!: backport #19234, fix GHSA-vg6x-rcgg-rjx6

[sapphi-red]

Description

backport of #19234, see GHSA-vg6x-rcgg-rjx6

[netlify]

✅ Deploy Preview for vite-docs-v5 ready!

Name	Link
🔨 Latest commit	18f1045
🔍 Latest deploy log	https://app.netlify.com/sites/vite-docs-v5/deploys/678e10bf2e3f140008e9d39d
😎 Deploy Preview	https://deploy-preview-19235--vite-docs-v5.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[sapphi-red]

/ecosystem-ci run

[vite-ecosystem-ci]

📝 Ran ecosystem CI on 18f1045: Open

suite	result	latest scheduled
analogjs	❌ failure	❌ failure
astro	❌ failure	✅ success
histoire	❌ failure	❌ failure
marko	❌ failure	✅ success
nuxt	✅ success	❌ failure
previewjs	❌ failure	✅ success
react-router	❌ failure	✅ success
redwoodjs	❌ failure	❌ failure
sveltekit	❌ failure	✅ success
vike	❌ failure	✅ success
vite-plugin-react	❌ failure	✅ success
vite-plugin-svelte	❌ failure	❌ failure
vite-setup-catalogue	❌ failure	✅ success
vitest	✅ success	❌ failure
waku	❌ failure	❌ failure

✅ ladle, laravel, quasar, qwik, rakkas, storybook, unocss, vite-environment-examples, vite-plugin-pwa, vite-plugin-react-swc, vite-plugin-vue, vitepress, vuepress

[emargareten]

This change brakes my workflows

error during build:
TypeError: Invalid URL
    at new URL (node:internal/url:816:29)
    at getAdditionalAllowedHosts (file:///xxxxx/xxxxx/node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:37687:29)
    at resolveConfig (file:///xxxxx/xxxxx//node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:53812:29)
    at async createBuilder (file:///xxxxx/xxxxx//node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:51529:18)
    at async CAC.<anonymous> (file:///xxxxx/xxxxx//node_modules/vite/dist/node/cli.js:852:23)

error when starting dev server:
TypeError: Invalid URL
    at new URL (node:internal/url:816:29)
    at getAdditionalAllowedHosts (file:///xxxxx/xxxxx/node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:37687:29)
    at resolveConfig (file:///xxxxx/xxxxx//node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:53812:29)
    at async createBuilder (file:///xxxxx/xxxxx//node_modules/vite/dist/node/chunks/dep-BdTvomPN.js:51529:18)
    at async CAC.<anonymous> (file:///xxxxx/xxxxx//node_modules/vite/dist/node/cli.js:852:23)

[patak-dev]

@emargareten please create an issue with a minimal reproduction so we can track it