Request to remove dependency on yahoo

[sbheinric]

Because some crypto functions take a long time to run, I wanted to put them into a worker thread using HTML5 Web Workers.

However, the "yahoo-min.js" script which is packaged into "jsrsasign-latest-all.js" contains unnecessary references to the "window" object (open window in a browser)...which does not exist in the Web Worker context, and prevents it from being able to run there.

It would be nice to remove this dependency on yahoo anyway as it is unclear why it should be there

[GregTurner]

I second request for another reason.

On heavily data loaded angularjs/rx.js apps, the yahoo-min.js was eating 2.7secs of time. It seems to consume cycles for functions it shouldn't be involved in. After removing the dependency on jsrasign by removing it from an upstream lib we saw significant performance improvement (25%).

[kjur]

Most of YUI codes are removed in 7.2.2 released today. It's just only YAHOO.lang.extend which is not vulnerable.