Re:Polyfill supply chain attack hits 100K+ sites
by chefandy on Thursday June 27, 2024 @12:41AM
(#40807283)
Sure... Though while I hate to say it, I don't blame people for trusting Google's hosted copy of something. For better or worse, they are more trustworthy than some "as seen on a million janky tutorials" whatever.io. A very privacy-focused employer precluded that possibility during peak adoption, but with what many sites load up, that's the least of your worries.
[ Parent
| on HN ]
Re:Polyfill supply chain attack hits 100K+ sites
by treflop on Thursday June 27, 2024 @02:12PM
(#40813358)
No problem with Google hosting it (although Iād still use sub-resource integrity) but anyone else?
Re:Polyfill supply chain attack hits 100K+ sites
by chefandy on Thursday June 27, 2024 @04:20PM
(#40814648)
Amusing:
https://news.ycombinator.com/item?id=10143620
The original author probably should have done everyone a favor and just killed the site altogether.