Skip to content

Commit

Permalink
Website: Remove polyfill. (#8870)
Browse files Browse the repository at this point in the history
Remove polyfill.

The `polyfill.io` domain was taken over by a malicious actor, and now
injects code that redirects to unrelated websites.

References:

<https://sansec.io/research/polyfill-supply-chain-attack>
<https://blog.cloudflare.com/automatically-replacing-polyfill-io-links-with-cloudflares-mirror-for-a-safer-internet/>

Reported-By: Elliott Green <[email protected]>
  • Loading branch information
SamWilsn authored Sep 6, 2024
1 parent 58a681e commit e2c094c
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion _includes/head.html
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,6 @@
{%- feed_meta -%}
<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-4bw+/aepP/YC94hEpVNVgiZdgIC5+VKNBQNGCHeKRQN+PtmoHDEXuppvnDJzQIu9" crossorigin="anonymous">
<link rel="stylesheet" href="{{ '/assets/css/override.css' | relative_url }}" />
<script src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
<script src="https://cdn.jsdelivr.net/npm/@popperjs/[email protected]/dist/umd/popper.min.js" integrity="sha384-oBqDVmMz9ATKxIep9tiCxS/Z9fNfEXiDAYTujMAeBAsjFuCZSmKbSSUnQlmh/jp3" crossorigin="anonymous"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.min.js" integrity="sha384-Rx+T1VzGupg4BHQYs2gCW9It+akI2MM/mndMCy36UVfodzcJcF0GGLxZIzObiEfa" crossorigin="anonymous"></script>
<script type="text/javascript">
Expand Down

0 comments on commit e2c094c

Please sign in to comment.