Base solution for your next web application
Open Closed

Is polyfill.io a security threat? #12289


User avatar
0
TimMackey created

Sucuri Labs is listing my website as a security threat.

There is a statement in file 'polyfills.ts':

// This file includes polyfills needed by Angular 2 and is loaded before
// the app. You can add your own extra polyfills to this file.

I have been running my app with no issue with polyfill commented out in index.html (the entire block commented out)

   <!-- <script
        src="https://cdn.tiny.cloud/1/l3ts5dnxncceww5dbpmjekhn0rocitpfppo3vhsd5pblu0i6/tinymce/5/tinymce.min.js"
        referrerpolicy="origin">
        tinymce.init({
            selector: '#tinymce',
            inline: true
        });
    </script>
    <script src="node_modules/tinymce/tinymce.min.js"></script>
    <script>src="/node_modules/@tinymce/tinymce-angular/fesm2015/tinymce-tinymce-angular.js"</script>
    <script src="/node_modules/@dimakorotkov/tinymce-mathjax/config.js" type="text/javascript" charset="utf-8"></script>
    <script src="/node_modules/mathjax/es5/tex-mml-chtml.js" type="text/javascript" charset="utf-8"></script>
    <script src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>
    <script id="MathJax-script" async src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js"></script> -->

Can I safely remove all references to polyfill.io?

My app is ASP .NET Core + Angular ANZ version 8.3.1


1 Answer(s)