Vite · VITE0010

Do not expose every env variable

Avoid envPrefix: "" in Vite config.
VITE0010vite-doctor/vitesecurityerrorNo fix

Run this rule

pnpm vite-doctor . --framework vite --rules vite/env/no-empty-env-prefix

Why it matters

Vite rejects an empty envPrefix to prevent exposing every environment variable to bundled client code, including secrets.

Remove empty env prefix, or move it to the Vite runtime/API that owns that behavior.

Example

Do not expose every env var

Before

export default defineConfig({
  envPrefix: '',
})

After

export default defineConfig({
  envPrefix: 'VITE_',
})
Copyright © 2026