Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[security] Remove polyfill.io dependency in docs #769

Merged
merged 1 commit into from
Jun 27, 2024

Conversation

AlexRTer
Copy link
Collaborator

Currently, mkdocs uses polyfill.io to build the online Daphne documentation.
It has been reported that the site is involved in a supply chain attack delivering malicious code instead.

This PR simply removes the dependency without replacement which should not impact the documentation in most browsers. If needed, e.g. Cloudflare currently provides polyfill over their cdn.

@AlexRTer AlexRTer merged commit 7188c72 into daphne-eu:main Jun 27, 2024
2 checks passed
@pdamme
Copy link
Collaborator

pdamme commented Jun 28, 2024

Thanks a lot for this security fix, @AlexRTer!

@AlexRTer AlexRTer deleted the remove-polyfill-dep branch September 19, 2024 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants