Flutterby™! : Polyfill.io compromise 2024-06-26 02:47:29.747763+02

Polyfill.io compromise

2024-06-26 02:47:29.747763+02 by Dan Lyke 0 comments

Whee! Loading your JavaScript from 3rd party sites may, in fact, be a bad idea... Who could have predicted this?

Sansec Forensicts Team: Polyfill supply chain attack hits 100K+ sites

Chinese company acquired the domain, is sending different results based on HTTP headers, yeah. Beyond the fact that you shouldn't need the Polyfill library because browser makers are really rushing out updates, don't let someone else serve your JavaScript.

Comment policy

We will not edit your comments. However, we may delete your comments, or cause them to be hidden behind another link, if we feel they detract from the conversation. Commercial plugs are fine, if they are relevant to the conversation, and if you don't try to pretend to be a consumer. Annoying endorsements will be deleted if you're lucky, if you're not a whole bunch of people smarter and more articulate than you will ridicule you, and we will leave such ridicule in place.

Flutterby™ is a trademark claimed by