Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include warning on polyfill.io sheet; use CF instead #2146

Merged

Conversation

Christopher-Hayes
Copy link
Contributor

@Christopher-Hayes Christopher-Hayes commented Jun 26, 2024

A warning is added to the polyfill.io sheet in relation to the malicious script that is now being served by polyfill.io. Removed all links to that domain.

The code snippets have also been updated to use Cloudflare's script instead. This allows users to keep using polyfill securely while they move their codebase away from using this polyfill.

Cloudflare press release: https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk

Fixes #2145

@rstacruz rstacruz merged commit 5c9fd72 into rstacruz:master Jun 27, 2024
1 check passed
@rstacruz
Copy link
Owner

thanks so much for this! its probably time to also note that polyfill.io is generally discouraged at this point.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove polyfill.io cheatsheet - the domain now serves malware
2 participants