Skip to content

Remove polyfill.io dependency from MkDocs configuration - #3

Merged
mtahle merged 1 commit into
mainfrom
claude/brave-mccarthy-2gsg61
Jun 28, 2026
Merged

Remove polyfill.io dependency from MkDocs configuration#3
mtahle merged 1 commit into
mainfrom
claude/brave-mccarthy-2gsg61

Conversation

@mtahle

@mtahle mtahle commented Jun 28, 2026

Copy link
Copy Markdown
Owner

Summary

Removed the polyfill.io CDN dependency from the MkDocs configuration as it is no longer needed for the project's JavaScript requirements.

Changes

  • Removed the polyfill.io v3 CDN link (https://polyfill.io/v3/polyfill.min.js?features=es6) from the extra_javascript section in mkdocs.yml
  • Fixed trailing newline in copyright notice for consistency

Details

The ES6 polyfill from polyfill.io was removed, likely because:

  • Modern browsers have native ES6 support
  • MathJax 3 and Mermaid have their own compatibility handling
  • This reduces external dependencies and potential security/performance concerns

https://claude.ai/code/session_01NEUVWvxcKynNcqKKFekqKz

cdn.polyfill.io was acquired by Funnull in Feb 2024 and weaponised
in Jun 2024 to inject malicious JS targeting mobile and specific
browser/OS combinations (notably Firefox on Linux).

MathJax 3.x requires no polyfill on any browser released in the last
5+ years. The line served no functional purpose and exposed site
visitors to a known compromised CDN.

Ref: https://sansec.io/research/polyfill-supply-chain-attack
@mtahle
mtahle merged commit b8949d4 into main Jun 28, 2026
1 of 2 checks passed
@mtahle
mtahle deleted the claude/brave-mccarthy-2gsg61 branch June 28, 2026 17:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant