Understanding the Polyfill Attack (Polykill)
Polyfills are ways of hacking new features into older browsers. An easy example is older browsers not supporting `@media` queries in CSS (which tell your screen size). If someone was on a phone using a really old browser, which is not as much of an issue in our post-chrome utopia, you could run Javascript to instead figure out how to display the proper sizes and make it work anyways. If we continu
polyfill.ioを使ã†ã®ã¯å±é™ºã‹ã‚‚ã—ã‚Œãªã„(å±é™ºã ã£ãŸ) - Qiita
TL;DR 2024/06/26 実害ãŒå‡ºã¦ã„るよã†ã§ã™ã€polyfill.ioを利用ã—ã¦ã„ã‚‹å ´åˆã¯ç›´ã¡ã«åˆ©ç”¨ã‚’æ¢ã‚ã¾ã—ょã†ã€‚ GIGAZINE: JavaScriptライブラリ「Polyfill.ioã€ã«ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ··å…¥ã•ã‚Œ10万以上ã®ã‚µã‚¤ãƒˆã«å½±éŸ¿ Codebook: Polyfill.io使ã£ãŸã‚µãƒ—ライãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒã§ã‚µã‚¤ãƒˆ10万件以上ã«å½±éŸ¿ polyfill.ioã‹ã‚‰é…ä¿¡ã•ã‚Œã‚‹ã‚¹ã‚¯ãƒªãƒ—トãŒæ±šæŸ“ã•ã‚Œã‚‹ç’°å¢ƒä¸‹ã«ã‚ã‚Šã€å±é™ºãªå¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚利用ã—ã¦ã„ã‚‹æ–¹ãŒã„らã£ã—ゃã„ã¾ã—ãŸã‚‰å¤–ã—ã¦ãŠãã“ã¨ã‚’ãŠã™ã™ã‚ã—ã¾ã™ã€‚ã¾ãŸã¯å®‰å…¨ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ã‚‚ã®ãŒCloudflareã¨Fastlyã‹ã‚‰åˆ©ç”¨ã§ãã‚‹ã®ã§ã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’polyfill-fastly.netã‚„polyfill-fastly.ioã«å¤‰æ›´ã—ã¦åˆ©ç”¨ã—ã¾ã—ょã†ã€‚ 背景 自社ã§ä½¿ç”¨ã—ã¦ã„るマーケティングプラットフォームサービスã§ä½œæˆã—ãŸWebページをGo
Polyfill supply chain attack hits 100K+ sites
by Sansec Forensics Team Published in Threat Research − June 25, 2024 The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites. Update June 28th: We are flagging more domains that have been used by the same actor to spread malware since at least June 2023: bootcdn.net, bootcss.com, staticfile.net, staticfile.org, unionadjs.com, xhsbpza.com, union.m
Explicit Resource Management: Exploring JavaScript's and TypeScript's new feature | iliazeus
One of my favorite new features of JavaScript and TypeScript is explicit resource management. It brings new syntax, using foobar = ..., that enables RAII, reducing boilerplate when managing the lifecycle of various resources. In this article, I will explore this feature as implemented in TypeScript 5.2.0 with the disposablestack polyfill. I will mention both sync and async resources, DisposableSta
A horrifying globalThis polyfill in universal JavaScript · Mathias Bynens
The globalThis proposal introduces a unified mechanism to access the global this in any JavaScript environment. It sounds like a simple thing to polyfill, but it turns out it’s pretty hard to get right. I didn’t even think it was possible until Toon blew my mind with an unexpected, creative solution. This write-up describes the difficulties with writing a proper globalThis polyfill. Such a polyfil
JSerレãƒãƒ¼ãƒˆ #2: Node.jsコアモジュールã¨Bundler(webpackãªã©)ã«ã‚ˆã‚‹polyfillã®ã‚®ãƒ£ãƒƒãƒ— - JSer.info
ã“ã®ãƒ¬ãƒãƒ¼ãƒˆã¯ã€ç¾åœ¨é€²è¡Œå½¢ã§æ©Ÿèƒ½è¿½åŠ や仕様変更ãŒè¡Œã‚ã‚Œã¦ã„ã‚‹Node.jsコアモジュールã¨ãƒ–ラウザå‘ã‘polyfillã«ãŠã‘る挙動ã®é•ã„(ギャップ)ãŒåºƒãŒã£ã¦ãã¦ã„ã‚‹å•é¡Œã«ã¤ã„ã¦èª¿ã¹ãŸã‚‚ã®ã§ã™ã€‚ ã“ã“ã§ã¯ https://nodejs.org/api/ ã«æŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ã†ã¡ assertã®ã‚ˆã†ã«Node.jsã«ãƒãƒ³ãƒ‰ãƒ«ã•ã‚Œã¦ã„るモジュールã®ã“ã¨ã‚’Node.jsコアモジュールã¨å‘¼ã³ã¾ã™ã€‚コアモジュールã¯Node.jsã§ã®åˆ©ç”¨ã®ã¿ã‚’想定ã—ã¦ã„ã‚‹ãŸã‚ã€Node.jsã«ä¾å˜ã—ãŸå‡¦ç†ã‚’多ãå«ã‚“ã§ã„ã¾ã™ã€‚ãã®ãŸã‚ã€ã‚³ã‚¢ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚³ãƒ¼ãƒ‰ã‚’コピーã—ã¦ãƒ–ラウザãªã©ã§å‹•ã‹ã™ã“ã¨ã¯é›£ã—ã„ã§ã™ã€‚ webpackã‚„browserifyãªã©ã®bundlerã¯ã€ã‚³ãƒ¼ãƒ‰ä¸ã«ã‚るコアモジュールを代替モジュールã¸ã¨ã™ã‚Šæ›¿ãˆã¾ã™ã€‚ã“ã®ä»£æ›¿ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ–ラウザå‘ã‘polyfillライブラリã¨ã‚ˆã³ã€ã“ã®polyfillライブラリ
Polyfill ã®ã‚り方㨠Web ã®é€²åŒ–ã¨å”調ã™ã‚‹ãŸã‚ã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ | blog.jxck.io
Intro W3C ã® TAG ã‹ã‚‰ã€ä¸»ã«ãƒ–ラウザ API ã® Polyfill ã«é–¢ã™ã‚‹ãƒ‰ã‚ュメントãŒå…¬é–‹ã•ã‚ŒãŸã€‚ Polyfills and the evolution of the Web Polyfill ã¯ä¾¿åˆ©ãªä¸€æ–¹ã§ã€æ™‚ã¨ã—ã¦æ¨™æº–化ã®å¦¨ã’ã«ãªã£ã¦ã—ã¾ã†å ´åˆãŒã‚ã‚‹ãŸã‚ã€ãれをé¿ã‘ã‚‹ãŸã‚ã«ã€Polyfill 実装者ã€åˆ©ç”¨è€…ã€ä»•æ§˜ç–定者ãªã©ãŒã€ã©ã†æŒ¯ã‚‹èˆžã†ã¹ãã‹ã¨ã„ã†è¶£æ—¨ã§ã‚る。 今回ã¯ã“ã®å†…容を元ã«ã€Web ã®é€²åŒ–ã¨å”調ã™ã‚‹ Polyfill ã®ã‚ã‚Šæ–¹ã«ã¤ã„ã¦ã€ä¸»ã«ã€Œå®Ÿè£…者ã€ãŒã©ã†ã™ã¹ãã‹ã«ç€ç›®ã—記ã™ã€‚ Web ã«ãŠã‘ã‚‹ Breaking Change Breaking Change ã¯ã€ç°¡å˜ã«è¨€ãˆã° 後方互æ›ã‚’失ã†ã“ã¨ã§æ—¢å˜ã®ã‚‚ã®ãŒå£Šã‚Œã‚‹å¯èƒ½æ€§ãŒã‚る変更 ã®ã“ã¨ã‚’表ã™ã€‚ ãã—ã¦ã€Web ã«ãŠã‘ã‚‹ Breaking Change (Break the Web)ã€å…·ä½“çš„ã«ã¯ Web
Polyfills and the evolution of the Web
Polyfills are a valuable part of Web architecture, because they promote the adoption of new features during the implementation process. However, polyfills can also create problems for standardization efforts and therefore for the future of the Web. This document defines the risks, benefits, and role of polyfills on the Web, and proposes best practices for implementors, spec editors, website develo
ランã‚ング
ランã‚ング
メンテナンス
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - es-shims/DisposableStack: An ESnext spec-compliant `DisposableStack`, `AsyncDisposableStack`, `Symbol.dispose`, and `Symbol.asyncDispose` shim/polyfill/replacement that works as far down as ES3.
GitHub - SukkaW/nolyfill: Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
GitHub - guybedford/es-module-shims: Shims for new ES modules features on top of the basic modules support in browsers
GitHub - sinnaj-r/esbuild-plugin-node-polyfills: Provides NodeJS Polyfills similar to Webpack's "node" option
@esbuild-plugins/node-globals-polyfill
State and governance of the project? · Issue #767 · zloirock/core-js
GitHub - matthew-andrews/isomorphic-fetch: Isomorphic WHATWG Fetch API, for Node & Browserify
Release 3.0.0-beta.4 - 2018.12.04 · zloirock/core-js · GitHub
GitHub - mozilla/webextension-polyfill: A lightweight polyfill library for Promise-based WebExtension APIs in Chrome
fs.promises
GitHub - ljharb/util.promisify: Polyfill/shim for util.promisify in node versions < v8
GitHub - developit/unfetch: 🕠Bare minimum 500b fetch polyfill.
{{#tags}}- {{label}}
{{/tags}}