[btea]

The base middleware used pathname.startsWith(base), so requests whose path only shares a partial segment with the base (e.g., /foobar/a.js with base /foo) were incorrectly rewritten as if they matched. Require an exact match with the base or a match on base + '/' instead

[sapphi-red]

I think stripBase handles that internally.

vite/packages/vite/src/node/utils.ts

Lines 1763 to 1769 in 18f9e07

	export function stripBase(path: string, base: string): string {
	if (path === base) {
	return '/'
	}
	const devBase = withTrailingSlash(base)
	return path.startsWith(devBase) ? path.slice(devBase.length - 1) : path
	}

[btea]

I think stripBase handles that internally.

That's right — the change narrows the base check to a full-segment match (path equals base or starts with base + '/'). Partial-segment requests (e.g., /foobar/a.js with base /foo) now hit the existing non-base fallback: a 404 with a hint in non-middleware mode, and plain next() in middleware mode.

Do you think we need to add this validation logic?

[sapphi-red]

Ah, I see. Then, I think the change is ok