Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Paul Cantrell (inthehands@hachyderm.io)'s status on Wednesday, 26-Jun-2024 12:07:52 JST Paul Cantrell
in reply to
- Eric Vitiello,la
- Dave DeLong
@pixel @davedelong
Can’t decide whether the mistake here was JavaScript, CDNs, all networks, or all software

In conversation about a year ago from hachyderm.io permalink
- Embed this notice
  Eric Vitiello,la (pixel@social.pixels.pizza)'s status on Wednesday, 26-Jun-2024 12:07:57 JST Eric Vitiello,la
  
  JavaScript was a mistake.
  https://fedi.simonwillison.net/@simon/112679629018556753
  In conversation about a year ago permalink
  Attachments
  1. No result found on File_thumbnail lookup.
    
    Simon Willison (@simon@simonwillison.net)
    
    from Simon Willison
    
    Worth grepping your source code for "polyfill.io" and taking urgent measures to remove that code if you're linking it into your site - the domain name apparently now intermittently serves malicious JavaScript My notes here: https://simonwillison.net/2024/Jun/25/polyfill-supply-chain-attack/ - or read this article https://sansec.io/research/polyfill-supply-chain-attack

Feeds