Merge pull request #488 from IGNF/fix/security-base64

fix(security): remplacer base64-img

Author: elias75015

DRAFT_CHANGELOG.md

@@ -30,5 +30,5 @@ __DATE__
 
 * 🔒 [Security]
 
-
+  - Build : transformation images en base 64 pour se passer de lodash.template (#488)
 ---

build/release/package.js

@@ -4,7 +4,7 @@ const path = require("path");
 var yargs = require("yargs");
 const child_process = require("child_process");
 const fg = require("fast-glob");
-const base64Img = require("base64-img");
+
 
 async function main () {
     const argv = yargs
@@ -73,7 +73,21 @@ async function main () {
                 if (!url.startsWith("data:")) {
                     url = path.normalize(url);
                     url = path.join(path.dirname(entry), url);
-                    const data = base64Img.base64Sync(url);
+                    // Remplacement de base64-img par une lecture/encodage natif
+                    const imgBuffer = fse.readFileSync(url);
+                    const mimeType = (() => {
+                        const ext = path.extname(url).toLowerCase();
+                        switch (ext) {
+                            case '.png': return 'image/png';
+                            case '.jpg':
+                            case '.jpeg': return 'image/jpeg';
+                            case '.svg': return 'image/svg+xml';
+                            case '.gif': return 'image/gif';
+                            case '.webp': return 'image/webp';
+                            default: return 'application/octet-stream';
+                        }
+                    })();
+                    const data = `data:${mimeType};base64,${imgBuffer.toString('base64')}`;
                     line = line.substring(0, start) + "('" + data + "'" + line.substring(end);
                 }
             }

package.json

@@ -1,8 +1,8 @@
 {
   "name": "geopf-extensions-openlayers",
   "description": "French Geoportal Extensions for OpenLayers libraries",
-  "version": "1.0.0-beta.8-491",
-  "date": "25/02/2026",
+  "version": "1.0.0-beta.8-488",
+  "date": "04/03/2026",
   "module": "src/index.js",
   "directories": {},
   "engines": {
@@ -69,7 +69,6 @@
     "@babel/preset-env": "^7.23.9",
     "@types/sanitize-html": "^2.16.0",
     "babel-loader": "^9.1.3",
-    "base64-img": "^1.0.4",
     "copy-webpack-plugin": "^12.0.2",
     "core-js": "^3.35.1",
     "css-loader": "^7.0.0",