Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Our current version is getting rather outdated. Replace by the *legacy* bundle: pdfjs now provides a non-polyfilled version of the library, which is probably faster though it doesn't save overly much (for the entire bundle anyway). Use polyfilled version for safety, though it's unclear whether non-chromium Edge is still supported by Odoo. If not, we could just use the non-polyfilled version. The difference is quite large for pdf.js (+32.5%), however it is much less consequential for the sandbox (+1%) or for the much larger worker (+5.6%). The biggest difference is likely performances but... who knows? Notes: - The main reason for this change is that automated vulnerability scanner have apparently started scanning for `postMessage(..., '*')` and the previous bundles includes a version of corejs polyfills without zloirock/core-js#542), therefore triggering those scans. As the PR notes this is almost certainly not a concern because of the innocuous payload, but there is no reason to waste time on those reports if we don't *have* to. - The bundle now includes "standard fonts", those were removed as they're heavy and may not be necessary for our usage (?). - All the bitmap images were dropped and replaced by svgs, which is nice. - The local changes since the previous update were *not* impacted in this, the entire thing was just reset to upstream. This means changes which were backported (922c7c7, 6943714) are superseded but more odoo-specific changes will have to be reapplied in further commits. Part-of: odoo#100067
- Loading branch information