/c/cybersecurity - Cybersecurity News & Discussion @lemmy.ml kryllic @programming.dev 5 mo. ago

Cloudflare's recent blog regarding polyfill shows that Cloudflare never authorized Polyfill to use their name in their product

blog.cloudflare.com Automatically replacing polyfill.io links with Cloudflare’s mirror for a safer Internet

polyfill.io, a popular JavaScript library service, can no longer be trusted and should be removed from websites

cross-posted from: https://programming.dev/post/16106778

Contrary to what is stated on the polyfill.io website, Cloudflare has never recommended the polyfill.io service or authorized their use of Cloudflare’s name on their website. We have asked them to remove the false statement, and they have, so far, ignored our requests. This is yet another warning sign that they cannot be trusted.