fix: replace crypto.randomUUID to allow insecure environments (fix #9338)

crypto.randomUUID is not available in the browser in case it gets executed in an insecure environment
Math.random() should suffice for mocking

Author: plusgut

packages/browser/src/client/public/esm-client-injector.js

@@ -9,7 +9,7 @@
     }
 
     const { evaluatedModules } = __vitest_worker__
-    const moduleId = crypto.randomUUID()
+    const moduleId = `${Math.random()}`
     const viteModule = evaluatedModules.ensureModule(moduleId, moduleId)
 
     viteModule.evaluated = false

test/browser/fixtures/server-insecure/src/basic.test.ts

@@ -0,0 +1,5 @@
+import { expect, test } from "vitest";
+
+test("basic", async () => {
+  expect(1).toBe((await import("./dynamic-import")).default);
+});

test/browser/fixtures/server-insecure/src/dynamic-import.ts

@@ -0,0 +1 @@
+export default 1;

test/browser/fixtures/server-insecure/vitest.config.ts

@@ -0,0 +1,17 @@
+import os from "node:os";
+import { defineConfig } from "vitest/config";
+import { instances, provider } from "../../settings";
+
+export default defineConfig({
+  test: {
+    browser: {
+      enabled: true,
+      headless: true,
+      provider,
+      instances,
+    },
+  },
+  server: {
+    host: os.hostname(),
+  },
+});

test/browser/specs/server-insecure.test.ts

@@ -0,0 +1,11 @@
+import { expect, test } from 'vitest'
+import { instances, runBrowserTests } from './utils'
+
+test('server-host check dynamic import at insecure context', async () => {
+  const { stdout, stderr } = await runBrowserTests({
+    root: './fixtures/server-insecure',
+  })
+
+  expect(stderr).toBe('')
+  expect(stdout).toReportSummaryTestFiles({ passed: instances.length })
+})