Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
#CESU-8 Encoding for Node.js
###An Explanation
At the moment, Node is punting on non-BMP unicode characters. What to do?
An unsatisfactory workaround was to manually do the unwinding, as proposed here: http://code.google.com/p/v8/issues/detail?id=761#c8
Which does in fact work, see: https://gist.github.com/1696314
Though it seems rather brittle. What happens if String.fromCharCode
returns a {
and garbles the JSON? Clearly not the answer.
So what's the problem? Why doesn't it work to begin with? Well, v8 doesn't support strict UTF-8, meaning that handing it a UTF-8 encoded buffer is never going to work, unless Javascript itself changes. (N.B. There is a strawman proposal)
But clearly something can be done 'cause the browser is working around the problem. From what I've surmised, using CESU-2 encoding, in lieu of UTF-8, will work. At least, that's what the browser appears to be doing.
To do the encoding, I looked at: http://www.unicode.org/reports/tr26/
This library shows that you can take a UTF-8 encoded buffer, convert it to UTF-16 with node-iconv and then build a string with the surrogate pairs. There are a few issues with this, String.length
will be one longer than expected, but that's the way it should work and does in the browser. But otherwise parsing JSON, the original use case, will be fine.
This can probably be done purely in Javascript, ie. no libiconv, or even pushed down to C++, as a new encoding, CESU-8.
###Install
With everyone's favourite package manager,
npm install cesu-8
###Example Usage
var cesu = require('cesu-8')
// emoji 🍨 🍩 🍪
var arr = [
101, 109, 111, 106, 105, 32, 240, 159, 141, 168,
32, 240, 159, 141, 169, 32, 240, 159, 141, 170
] // these are the octets for the above string in utf8
var utf8buffer = new Buffer(arr)
var mystring = cesu.toString(utf8buffer)
// do whatever you want with the string
// have fun
// seriously
// convert it back to a buffer
var backtobuf = cesu.toBuffer(mystring)
process.stdout.write(backtobuf)
###Todo
0xFFEF
FAQs
Convert a UTF-8 buffer to a CESU-8 string
The npm package cesu-8 receives a total of 0 weekly downloads. As such, cesu-8 popularity was classified as not popular.
We found that cesu-8 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.