snyk 1.792.0 → 1.793.0

package/dist/cli/64.index.js

@@ -207822,12 +207822,16 @@ async function loadNuspecFromAsync(dep) {
     if (!nuspecZipData) {
         throw new Error(`failed to open nupkg file as an archive from: ${nupkgPath}`);
     }
-    return await nuspecZipData.files[nuspecFile].async('text');
+    const rawNuspecContent = await nuspecZipData.files[nuspecFile].async('text');
+    const encoding = detectNuspecContentEncoding(rawNuspecContent);
+    const encodedNuspecContent = Buffer.from(rawNuspecContent).toString(encoding);
+    const normalisedNuspecContent = removePotentialUtf16Characters(encodedNuspecContent);
+    return normalisedNuspecContent;
 }
 //this is exported for testing, but should not executed directly. Hence the '_' in the name.
 async function _parsedNuspec(nuspecContent, targetFramework, depName) {
     var _a;
-    const parsedNuspec = await parseXML.parseStringPromise(nuspecContent.trim());
+    const parsedNuspec = await parseXML.parseStringPromise(nuspecContent);
     let ownDeps = [];
     //note: this will throw if assertion fails
     assertNuspecSchema(parsedNuspec);
@@ -207942,6 +207946,26 @@ function extractDepsFromRaw(rawDependencies) {
     });
     return deps;
 }
+var SupportedEncodings;
+(function (SupportedEncodings) {
+    SupportedEncodings["UTF8"] = "utf-8";
+    SupportedEncodings["UTF16LE"] = "utf-16le";
+})(SupportedEncodings || (SupportedEncodings = {}));
+function detectNuspecContentEncoding(nuspecContent) {
+    // 65533 is a code for replacement character that is unique to UTF-16
+    // https://www.unicodepedia.com/unicode/specials/fffd/replacement-character/
+    if (nuspecContent.charCodeAt(0) === 65533) {
+        return SupportedEncodings.UTF16LE;
+    }
+    return SupportedEncodings.UTF8;
+}
+function removePotentialUtf16Characters(input) {
+    return input
+        .replace(/\uFFFD/g, '')
+        .replace(/\uBFEF/g, '')
+        .replace(/\uBDBF/g, '')
+        .replace(/\uEFBD/g, '');
+}
 //# sourceMappingURL=nuspec-parser.js.map
 
 /***/ }),