fix(core): Wrap decodeURI in node stack trace parser to handle malformed URIs (#19400)

This PR wraps `decodeURI` in `node-stack-trace.ts` with a try/catch so
that malformed URIs (e.g. filenames containing `%` sequences that are
not valid percent-encoding) no longer throw a `URIError` and crash the
SDK. The raw filename is returned as a fallback. In addition, we only
call `getModule` if we successfully decode the filename, since in
`getModule` implementations, we also again attempt to decode filenames.

Since we don't have a concrete filename in #19391 which we can reproduce
this, this is rather a "best effort" fix. But I think it's worth having
this either way.

Closes #19391

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Lms24

packages/core/src/utils/node-stack-trace.ts

@@ -115,9 +115,10 @@ export function node(getModule?: GetModuleFn): StackLineParserFn {
         filename = lineMatch[5];
       }
 
+      const maybeDecodedFilename = filename ? _safeDecodeURI(filename) : undefined;
       return {
-        filename: filename ? decodeURI(filename) : undefined,
-        module: getModule ? getModule(filename) : undefined,
+        filename: maybeDecodedFilename ?? filename,
+        module: maybeDecodedFilename && getModule?.(maybeDecodedFilename),
         function: functionName,
         lineno: _parseIntOrUndefined(lineMatch[3]),
         colno: _parseIntOrUndefined(lineMatch[4]),
@@ -148,3 +149,11 @@ export function nodeStackLineParser(getModule?: GetModuleFn): StackLineParser {
 function _parseIntOrUndefined(input: string | undefined): number | undefined {
   return parseInt(input || '', 10) || undefined;
 }
+
+function _safeDecodeURI(filename: string): string | undefined {
+  try {
+    return decodeURI(filename);
+  } catch {
+    return undefined;
+  }
+}

packages/core/test/lib/utils/stacktrace.test.ts

@@ -392,4 +392,21 @@ describe('node', () => {
 
     expect(node(input)).toEqual(expectedOutput);
   });
+
+  it('returns the raw filename when decodeURI throws a URIError', () => {
+    const malformedFilename = '/path/to/%file%.js';
+    const input = `at myFunction (${malformedFilename}:10:5)`;
+
+    const result = node(input);
+
+    expect(result?.filename).toBe('/path/to/%file%.js');
+  });
+
+  it('decodes a valid percent-encoded filename', () => {
+    const input = 'at myFunction (/path/to/my%20file.js:10:5)';
+
+    const result = node(input);
+
+    expect(result?.filename).toBe('/path/to/my file.js');
+  });
 });