Malformed HTML Entities in Ember Templates

[ben-crowhurst]

🐞 Describe the Bug

Ember (Handlebars?) fails to parse HTML entities, inserting unknown character code symbols <?>.

🔬 Minimal Reproduction

Create a new handlebars template with the four following anchor elements:

/* Fail */
<a class="close" href="#" {{on "click" @hide}}>&times;</a>

/* Pass */
<a {{on "click" @hide}} class="close" href="#">&times;</a>
<a class="close" href="#" {{on "click" @hide}}> &times; </a>
<a class="close" href="#" {{on "click" @hide}}>&times;&times;</a>

😕 Actual Behavior

Unknown character code symbols appear in the browser where the HTML entity should be presented.

🤔 Expected Behavior

Given ×
Then I should see ×

🌍 Environment

• Ember: - 5.10
• Ember-CLI: - 5.10.0
• Node.js/npm: - 22.7.0
• OS: - GNU/Linux 6.8.0-76060800daily20240311-generic PopOS 22.04.
• Browser: - Firefox 128.0 (64-bit).

[NullVoxPopuli]

This is actually a node issue. Can you downgrade to 22.6 or earlier?

[ben-crowhurst]

Oh! that really intrigues me. Do you have a Node issue I can dive deeper into? I'd love to understand the cause.

Yes, we can downgrade, thanks.

We chose to move the on-click handler to the front of the element and made a doco reference locally.

[NullVoxPopuli]

• Buffer.from() output breaks after optimizing in nodejs 22.7 nodejs/node#54521
• Textencoder decode to UTF8 with fatal true throws exception in version 22.7 nodejs/node#54628
• UTF+8 encodings are broken nodejs/node#54543
• ERR_BUFFER_OUT_OF_BOUNDS error with Google Vision package on Node 22.7.0 nodejs/node#54518

[ben-crowhurst]

Happy to close this issue as an upstream vendor offender.