Backstage doesn't load in Safari (when using @backstage/integration-react)

[egnwd]

Expected Behavior

I should be able to load a page in Safari.

Current Behavior

I get a white screen and a console log saying:

SyntaxError: Invalid regular expression: invalid group specifier name

Possible Solution

Possibly parsing git urls some other way? or somehow pin the normalize-url version, and live with the security vulnerability (see context below). neither option seem great.

Steps to Reproduce

1. Use @backstage/integration-react in app
2. Boot the app
3. Visit any page in Safari
4. 💥

Context

There is a fair bit of context, it seems:

• Safari doesn't support Lookbehinds in regex in Javascript
• the bug is in this package and they claim it shouldn't be used in browsers, stating if you need it to work in browsers then you should use the previous version (v4.5.0)
• This package gets used because: @backstage/integration-react > @backstage/integration > git-url-parse > git-up > parse-url > normalize-url@^6.0.1
• So even though the version of git-url-parse is pointing at the right one I think yarn is picking up the latest normalize-url?
  At leat that is what yarn why normalize-url suggests

   Found "parse-url#normalize-url@6.0.1"
   info This module exists because "_project_#backend#@backstage#backend-common#git-url-parse#git-up#parse-url" depends on it.
  

• However in newer versions, git-up uses a later version because of a security vulnerability, knowing it will break Safari
• Someone more well versed in yarn versioning might be able to see through this sea of versions better than I.

Your Environment

• NodeJS Version: v14.15.1
• Operating System and Version (e.g. Ubuntu 14.04): macOS Big Sur 11.2
• Browser Information: Version 14.0.3 (16610.4.3.1.4)

[timbonicus]

Thanks for reporting! This may be the same as #6039?

[egnwd]

@timbonicus yes, I missed it, sorry about that, I'll close as a duplicate