craftcms / commerce-paypal-checkout

PayPal Checkout gateway for Craft Commerce.

https://plugins.craftcms.com/commerce-paypal-checkout

MIT License

5 stars 10 forks source link

security: remove polyfill.io usage #88

Closed elibosley closed 2 months ago

elibosley commented 2 months ago

Polyfill.io has been compromised, moved to cloudflare mirror

Description

https://sansec.io/research/polyfill-supply-chain-attack

Related issues

87

zackspear commented 2 months ago

More details https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk?mkt_tok=NzEzLVhTQy05MTgAAAGT9RidmpDQvtIZ3al5V5HllnsEIhUoD2dzq2C7VFKbYI33pxALNOwmgQwB65YUlxBxaYgFGdoDhrSCgNefuqgJt4M2EgTNY7LUGy6jPr4dnL6vNuTSzC1H

lukeholder commented 2 months ago

Thankyou. This will be fixed a separate commit.