fix(inject): Skip non-base64 embedded sourcemaps (#3243)

When you bundle tools like terser or babel into a single JS file (common
in browser-based IDEs or bundler workers), their minified code contains
template literals that build `//#
sourceMappingURL=data:application/json;base64,...` strings as output.
After minification, these can land at the start of a line, and
`discover_sourcemaps_location` treats them as real sourcemap directives.

The problem is the "base64" payload is actually just more JS code, so
decoding fails and `sourcemaps inject` bails with `Invalid embedded
sourcemap`, stopping the whole injection.

This changes the `bail!` to a `warn!` + `continue`, which matches how
the injection flow already handles other non-fatal cases like missing
sourcemaps, ambiguous paths, and unfound files. The file gets skipped
and everything else processes normally.

Includes a test with a minimal fixture that reproduces the issue.

### Issues

#3244

### Legal Boilerplate
Look, I get it. The entity doing business as "Sentry" was incorporated
in the State of Delaware in 2015 as Functional Software, Inc. and is
gonna need some rights from me in order to utilize my contributions in
this here PR. So here's the deal: I retain all rights, title and
interest in and to my contributions, and by keeping this boilerplate
intact I confirm that Sentry can use, modify, copy, and redistribute my
contributions, under Sentry's choice of terms.

---------

Co-authored-by: Sebastian Zivota <loewenheim@mailbox.org>

Author: nyan-left

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+### Fixes
+
+- (sourcemaps) Skip non-base64 embedded sourcemaps during injection ([#3243](https://github.com/getsentry/sentry-cli/pull/3243))
+
 ### New Features ✨
 
 - Add `sentry-cli build download` command to download installable builds (IPA/APK) by build ID ([#3221](https://github.com/getsentry/sentry-cli/pull/3221)).

src/utils/sourcemaps.rs

@@ -790,7 +790,12 @@ impl SourceMapProcessor {
 
                         let Ok(mut decoded) = data_encoding::BASE64.decode(encoded.as_bytes())
                         else {
-                            bail!("Invalid embedded sourcemap in source file {source_url}");
+                            // The data URL isn't valid base64, so we can't use it.
+                            // This commonly happens when minified bundles contain
+                            // sourceMappingURL strings inside template literals
+                            // (e.g from bundled terser or babel)
+                            warn!("Skipping {source_url}: embedded sourcemap is not valid base64");
+                            continue;
                         };
 
                         let mut sourcemap =

tests/integration/_fixtures/inject_sourcemap_in_string_literal/bundler.worker.js

@@ -0,0 +1,7 @@
+var x = 1 + 2;
+var output =
+  code +
+  `
+//# sourceMappingURL=data:application/json;base64,` +
+  btoa(json);
+console.log(x);

tests/integration/sourcemaps/inject.rs

@@ -241,6 +241,29 @@ fn command_sourcemaps_inject_malformed_map() {
     );
 }
 
+#[test]
+fn command_sourcemaps_inject_sourcemap_url_in_string_literal() {
+    // When tools like terser or babel are bundled into a worker, their minified
+    // code contains string concatenations that produce sourceMappingURL comments.
+    // After minification these can land at column 0, making them look like real
+    // sourcemap directives. sentry-cli should not treat them as embedded
+    // sourcemaps and should not fail.
+    let testcase_cwd_path =
+        "tests/integration/_cases/sourcemaps/sourcemaps-inject-sourcemap-in-string-literal.in/";
+    if std::path::Path::new(testcase_cwd_path).exists() {
+        remove_dir_all(testcase_cwd_path).unwrap();
+    }
+    copy_recursively(
+        "tests/integration/_fixtures/inject_sourcemap_in_string_literal/",
+        testcase_cwd_path,
+    )
+    .unwrap();
+
+    TestManager::new()
+        .assert_cmd(vec!["sourcemaps", "inject", testcase_cwd_path])
+        .run_and_assert(AssertCommand::Success);
+}
+
 /// Recursively assert that the contents of two directories are equal.
 ///
 /// We only support directories that contain exclusively text files.