kumquat-buildroot/package/jszip/jszip.mk

################################################################################
#
# jszip
#
################################################################################

JSZIP_VERSION = 3.10.0
JSZIP_SITE = $(call github,Stuk,jszip,v$(JSZIP_VERSION))
JSZIP_LICENSE = MIT or GPL-3.0
JSZIP_LICENSE_FILES = LICENSE.markdown
JSZIP_CPE_ID_VENDOR = jszip_project

define JSZIP_INSTALL_TARGET_CMDS
	$(INSTALL) -m 0644 -D $(@D)/dist/jszip.min.js \
		$(TARGET_DIR)/var/www/jszip/js/jszip.min.js
endef

$(eval $(generic-package))
package/jszip: new package Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-12-08 19:05:24 +01:00			`################################################################################`
			`#`
			`# jszip`
			`#`
			`################################################################################`

package/jszip: security bump to version 3.10.0 - Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. - Drop patch (already in version) - Update hash of license file (dual licensing clarification with https://github.com/Stuk/jszip/commit/f81c2d700d8e5fec4ed89fb565e4a266bb4dd26e) - Update indentation in hash file (two spaces) https://github.com/Stuk/jszip/blob/v3.10.0/CHANGES.md Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2022-07-27 11:29:46 +02:00			`JSZIP_VERSION = 3.10.0`
package/jszip: new package Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-12-08 19:05:24 +01:00			`JSZIP_SITE = $(call github,Stuk,jszip,v$(JSZIP_VERSION))`
			`JSZIP_LICENSE = MIT or GPL-3.0`
			`JSZIP_LICENSE_FILES = LICENSE.markdown`
package/jszip: add JSZIP_CPE_ID_VENDOR cpe:2.3:a:jszip_project:jszip is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ajszip_project%3Ajszip Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2021-08-15 09:39:36 +02:00			`JSZIP_CPE_ID_VENDOR = jszip_project`
package/jszip: new package Signed-off-by: Joeri Barbarien <joeri.barbarien@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2020-12-08 19:05:24 +01:00
			`define JSZIP_INSTALL_TARGET_CMDS`
			`$(INSTALL) -m 0644 -D $(@D)/dist/jszip.min.js \`
			`$(TARGET_DIR)/var/www/jszip/js/jszip.min.js`
			`endef`

			`$(eval $(generic-package))`