Esri / arcgis-rest-js

compact, modular JavaScript wrappers for the ArcGIS REST API
https://developers.arcgis.com/arcgis-rest-js/
Apache License 2.0
347 stars 119 forks source link

docs: do not use polyfill.io due to a security issue #1173

Closed gavinr-maps closed 2 months ago

gavinr-maps commented 2 months ago

closes #1172

The only usage of polyfill[.]io is in the old v3 demos. Even though generally we are not maintaining those, we think this security issue is big enough to warrent a small change, for those who may stumble on these in the future.

This switches to using the safe cloudflare version instead: https://blog.cloudflare.com/automatically-replacing-polyfill-io-links-with-cloudflares-mirror-for-a-safer-internet