Replace `polyfill.io` with Cloudflare mirror for Craft 3.x

putyourlightson / craft-blitz

Intelligent static page caching for creating lightning-fast sites with Craft CMS.

https://putyourlightson.com/plugins/blitz

Other

149 stars 36 forks source link

Replace `polyfill.io` with Cloudflare mirror for Craft 3.x #678

Closed pixleight closed 3 months ago

pixleight commented 3 months ago

Due to a supply chain attack affecting polyfill.io, this replaces references to the now compromised library with one hosted by Cloudflare for the Craft 3.x version of the plugin.

More info:

https://sansec.io/research/polyfill-supply-chain-attack
https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk

bencroker commented 3 months ago

Thanks for the PR! I opted to follow suit with what I did with Blitz 4 months ago which is to remove the polyfills in https://github.com/putyourlightson/craft-blitz/commit/a6288fbcdbbb4ac37c0b408374ce14277e351b53.