Skip to content

Commit 6d40a03

Browse files
committed
Security: Remove malicious polyfill.io script due to supply-chain attack
The polyfill.io domain was compromised in a major supply-chain malware attack. This script is no longer necessary as modern browsers natively support ES6 features. Removes the line: <script defer src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
1 parent f2fe357 commit 6d40a03

1 file changed

Lines changed: 1 addition & 2 deletions

File tree

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{%- if site.enable_math -%}
1+
{%- if site.enable_math -%}
22
<!-- MathJax -->
33
<script type="text/javascript">
44
window.MathJax = {
@@ -8,5 +8,4 @@
88
};
99
</script>
1010
<script defer type="text/javascript" id="MathJax-script" src="https://cdn.jsdelivr.net/npm/mathjax@{{ site.mathjax.version }}/es5/tex-mml-chtml.js"></script>
11-
<script defer src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
1211
{%- endif %}

0 commit comments

Comments
 (0)