Re: jquery / CVE-2019-11358

2019-05-03 Thread Brian May
Brian May writes: > $ /usr/bin/uglifyjs --unsafe ./dist/jquery.js -v Looks like that command reads from STDIN, not the specified file. Now changed the Makefile to use: $ /usr/bin/uglifyjs --unsafe < ./dist/jquery.js which appears to work. Updated patch attached. -- Brian May diff -Nru jque

Re: jquery / CVE-2019-11358

2019-05-02 Thread Brian May
Brian May writes:> > dh_auto_build > make[1]: Entering directory '/<>/jquery-1.7.2+dfsg' > Building ./dist/jquery.js > Minifying jQuery ./dist/jquery.min.js > jQuery Size - compared to last make > 252945 (-) jquery.js >1 (-) jquery.min.js > 35 (-) jquery.min.js.gz >

jquery / CVE-2019-11358

2019-05-01 Thread Brian May
The patch seems simple enough (see attached). Unfortunately, the minimisation that happens during build is just a little bit too efficient for my likes. Sure, 1 byte output is very efficient. dh_auto_build make[1]: Entering directory '/<>/jquery-1.7.2+dfsg' Building ./dist/jquery.js Minifying jQu