Bug#907957: privacy-breach-generic: false positives for commented out javascript code

[Chris Lamb <lamby@debian.org>]

tags 907957 + moreinfo
thanks

Hi Thomas,

> > /**
> >  * <script src="http://domainB.com/users?theCallbackFunction=callback1";></script>
> >  */
> 
> would output that warning, even if this code never can possibly get executed as
> it's commented out

Lintian supports stripping/ignoring of comments, however we process
files in large chunks and, if the comment goes across such a chunk, it
is not removed.

This is the indeed the case with the "sencha-touch-all-debug.js" file
(found online via a search).

Ideas?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-