Skip to content

Commit 3d594c9

Browse files
security: remove polyfill.io script tag from public/index.html
The polyfill.io domain was compromised in 2024 and used to inject malicious JavaScript via CDN responses. All loaded features (replaceAll, IntersectionObserver, map, reduce) are natively supported by all modern browsers — no alternative needed.
1 parent 1d5c5a9 commit 3d594c9

1 file changed

Lines changed: 0 additions & 1 deletion

File tree

public/index.html

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,6 @@
7979
type="text/css"
8080
media="all"
8181
/>
82-
<script src="https://polyfill.io/v3/polyfill.min.js?features=String.prototype.replaceAll%2CIntersectionObserver%2CArray.prototype.map%2CArray.prototype.reduce"></script>
8382
<script
8483
type="text/javascript"
8584
src="https://maps.googleapis.com/maps/api/js?key=AIzaSyDy8e6_8uv8JnNZFRXng6HfbhnhvobWyac&libraries=places"

0 commit comments

Comments
 (0)