-
-
Notifications
You must be signed in to change notification settings - Fork 755
Description
Describe the bug
The repository includes a heavily obfuscated and compressed javascript file, which is used to embed images and other media hosted in a cryptpad on 3rd party sites: www/common/media-tag-nacl.min.js
This file is quite significant, since it is more or less the only instance where data is downloaded and decrypted in a standalone manner, outside of and without the overhead of the main GUI/framework. For learning the framework/API or coding helper tools this would be a great starting point.
However the source code is not accessible: www/common/media-tag.js apparently has a different function and can not be substituted for media-tag-nacl.min.js -- and decompiling the script is not helpful, as variable names have been shortened.
This is not just inconvenient, it might also constitute a license violation.
Where did it happen?
- Every version since commit id e2719 in 2017
To Reproduce
- Add a needed javascript file to the repo, but forget that it had been obfuscated despite the license demanding open source.
Expected behavior
- Always add source for binaries or obfuscated scripts to the repository - ideally do not add obfuscated code at all, but provide a script to auto-obfuscate/compress at compile/installation time or at runtime/ during startup.