travist / jsencrypt

A zero-dependency Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
http://www.travistidwell.com/jsencrypt
Other
6.68k stars 2.02k forks source link

YUI does not exist, this comment will cause false positives for vulnerability sweeps #313

Open WeijianXu opened 2 months ago

WeijianXu commented 2 months ago

Hi! πŸ‘‹

Firstly, thanks for your work on this project! πŸ™‚

Today I used patch-package to patch jsencrypt@3.3.2 for the project I'm working on.

Here is the diff that solved my problem:

diff --git a/node_modules/jsencrypt/lib/lib/jsrsasign/yahoo.js b/node_modules/jsencrypt/lib/lib/jsrsasign/yahoo.js
index aa0d9aa..e148e5c 100644
--- a/node_modules/jsencrypt/lib/lib/jsrsasign/yahoo.js
+++ b/node_modules/jsencrypt/lib/lib/jsrsasign/yahoo.js
@@ -1,8 +1,6 @@
 /*!
 Copyright (c) 2011, Yahoo! Inc. All rights reserved.
 Code licensed under the BSD License:
-http://developer.yahoo.com/yui/license.html
-version: 2.9.0
 */
 export var YAHOO = {};
 YAHOO.lang = {

This issue body was partially generated by patch-package.