ts
  // these checks ensure that a project without a custom root respects fs.deny

  fetch('/.env')
    .then((r) => {
      text('.unsafe-dotenv', r.status)
    })
    .catch((e) => {
      console.error(e)
    })

  fetch(window.location + '/.env')
    .then((r) => {
      text('.unsafe-dotenv-double-slash', r.status)
    })
    .catch((e) => {
      console.error(e)
    })

  function text(el, text) {
    document.querySelector(el).textContent = text
  }
</script>
