Skip to content

(possible) AGPL violation: Source code missing for obfuscated "www/common/media-tag-nacl.min.js" #842

@CorvusCorax

Description

@CorvusCorax

Describe the bug
The repository includes a heavily obfuscated and compressed javascript file, which is used to embed images and other media hosted in a cryptpad on 3rd party sites: www/common/media-tag-nacl.min.js

This file is quite significant, since it is more or less the only instance where data is downloaded and decrypted in a standalone manner, outside of and without the overhead of the main GUI/framework. For learning the framework/API or coding helper tools this would be a great starting point.

However the source code is not accessible: www/common/media-tag.js apparently has a different function and can not be substituted for media-tag-nacl.min.js -- and decompiling the script is not helpful, as variable names have been shortened.

This is not just inconvenient, it might also constitute a license violation.

Where did it happen?

  • Every version since commit id e2719 in 2017

To Reproduce

  • Add a needed javascript file to the repo, but forget that it had been obfuscated despite the license demanding open source.

Expected behavior

  • Always add source for binaries or obfuscated scripts to the repository - ideally do not add obfuscated code at all, but provide a script to auto-obfuscate/compress at compile/installation time or at runtime/ during startup.

Metadata

Metadata

Assignees

No one assigned

    Labels

    DependenciesAny software dependancies problems

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions