[Pkg-javascript-devel] Bug#944877: non-ascii, non-printable byte in jquery.min.js

JCF Ploemen linux at jcf.pm
Sat Nov 16 19:22:49 GMT 2019


Package: libjs-jquery
Severity: normal
Control: found -1 3.2.1-1
Control: found -1 3.3.1~dfsg-3

A recent bug filed against sabnzbdplus [1], a python program using
cherrypy to serve its web interface that in turn uses jquery, reported
the following error upon accessing the web interface:
"UnicodeDecodeError: 'ascii' codec can't decode byte 0xef in position
8593: ordinal not in range(128)". The bug only triggered in case the
program was executed in a non-unicode environment.

The origin of that problematic byte turned out to be the minified
jquery from the libjs-jquery package. Both the non-minified code [2]
and upstream's minified file use the notation "\uFFFD" for this byte;
only in Debian's jquery.min.js it ends up as 0xef.

I understand why Debian chooses to build the minified version itself
rather than ship the one supplied with upstream releases, but doing so
shouldn't introduce unnecessary regressions. Please fix the minifying
process to retain the ascii notation for the likes of "\uFFFD".


[1] https://github.com/sabnzbd/sabnzbd/issues/1335
[2] https://salsa.debian.org/js-team/jquery/blob/77bef356e3b7385e22d52dd2103f6225eb6012f0/external/sizzle/dist/sizzle.js#L161
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20191116/2678beab/attachment.sig>


More information about the Pkg-javascript-devel mailing list