Thank you for the info, it's always nice to understand/learn how things (your build process in this case) works.
No problem waiting, I have replaced the js with the "fixed" one and works, the title/tooltip is still broken (unescaped), so it's truncated....but that's is really a minor issue (already commented in github).
As for the fix....well....my point is more on the process, in my opinion ideally EVERYTHING should be properly encoded/escaped BY DESIGN in the development process, not "fixed" as "wrong characters" appear in usage cases.
Other products/projects may (and really DO) open BIG security holes when "things" are not encoded/escaped properly. Sure enough my STB is definitely not something I consider secure, nor I think it should be.
But hey, I'm definitely less of what you are...sooo....