Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update polyfill URL due to service unavailability and supply chain attack risk #6740

Merged
merged 1 commit into from
Jul 11, 2024

Conversation

Mmx233
Copy link
Contributor

@Mmx233 Mmx233 commented Jul 11, 2024

The CDN service polyfill.io has recently been unavailable, and it has been found to be used in implementing supply chain attack, related issue in polyfill repo. The GitHub repo of the polyfill service will now show a warning alert.

This PR changes the default polyfill url to use cloudflare alternative endpoint, which can reduce the supply chain risk.

@Mmx233 Mmx233 changed the title chore: update polyfill url chore: update polyfill URL due to service unavailability and supply chain attack risk Jul 11, 2024
@Mmx233 Mmx233 force-pushed the chore/update-polyfill-url branch from 414abbc to 78eef76 Compare July 11, 2024 03:17
@xhofe xhofe merged commit 33be44a into AlistGo:main Jul 11, 2024
3 checks passed
@Mmx233 Mmx233 deleted the chore/update-polyfill-url branch July 11, 2024 15:47
@Daniel15
Copy link

You can totally delete this, as all modern browsers support String.prototype.replaceAll. https://caniuse.com/mdn-javascript_builtins_string_replaceall

ForSourceCodeAnalysis pushed a commit to ForSourceCodeAnalysis/alist that referenced this pull request Aug 4, 2024
Three-taile-dragon pushed a commit to loognsss/blist that referenced this pull request Sep 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants