From fb16d7bfa1e32c21a2f4b627fb8864d3c5c6b655 Mon Sep 17 00:00:00 2001
From: shadowings-zy <shadowingszy@outlook.com>
Date: Tue, 30 Mar 2021 17:43:34 +0800
Subject: [PATCH] fix(vdom): avoid executing root level script tags (#11487)

fix #11483
---
 src/compiler/codegen/index.js                  |  3 ++-
 test/unit/features/component/component.spec.js | 13 +++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/src/compiler/codegen/index.js b/src/compiler/codegen/index.js
index c96b3a38511..c4f0195c7ff 100644
--- a/src/compiler/codegen/index.js
+++ b/src/compiler/codegen/index.js
@@ -45,7 +45,8 @@ export function generate (
   options: CompilerOptions
 ): CodegenResult {
   const state = new CodegenState(options)
-  const code = ast ? genElement(ast, state) : '_c("div")'
+  // fix #11483, Root level <script> tags should not be rendered.
+  const code = ast ? (ast.tag === 'script' ? 'null' : genElement(ast, state)) : '_c("div")'
   return {
     render: `with(this){return ${code}}`,
     staticRenderFns: state.staticRenderFns
diff --git a/test/unit/features/component/component.spec.js b/test/unit/features/component/component.spec.js
index 34c037a1e74..697a9dddbe7 100644
--- a/test/unit/features/component/component.spec.js
+++ b/test/unit/features/component/component.spec.js
@@ -426,4 +426,17 @@ describe('Component', () => {
       vm.$destroy()
     }).then(done)
   })
+
+  it('render vnode with <script> tag as root element', () => {
+    const vm = new Vue({
+      template: '<scriptTest></scriptTest>',
+      components: {
+        scriptTest: {
+          template: '<script>console.log(1)</script>'
+        }
+      }
+    }).$mount()
+    expect(vm.$el.nodeName).toBe('#comment')
+    expect('Templates should only be responsible for mapping the state').toHaveBeenWarned()
+  })
 })