Replace polyfillurl to avoid security vulnerabilities (#2018)

* chore: replace `polyfill.io` * fix(changelog): add change log --------- Co-authored-by: SukkaW <[email protected]>
electrode-io · Jul 5, 2024 · 6392a8f · 6392a8f
1 parent 789a54f
commit 6392a8f
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json b/common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "subapp-web",
+      "comment": "replace polyfill.io url to avoid security issues",
+      "type": "patch"
+    }
+  ],
+  "packageName": "subapp-web"
+}
diff --git a/packages/subapp-web/lib/polyfill.js b/packages/subapp-web/lib/polyfill.js
@@ -3,7 +3,7 @@
 module.exports = function setup() {
   return {
     process() {
-      return `<script src="https://polyfill.io/v3/polyfill.min.js?features=es5,es6&flags=gated"></script>`;
+      return `<script src="https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=es5,es6&flags=gated"></script>`;
     }
   };
 };