Jump to content

HoangExprto

Member
  • Posts

    4
  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

HoangExprto's Achievements

Level 1

Level 1 (1/20)

1

Reputation

  1. Just ignore //assets.squarespace.com/@sqs/polyfiller/1.6/legacy.js and //assets.squarespace.com/@sqs/polyfiller/1.6/modern.js. I initially thought that since it is the only polyfill thing in your website, it might be the cause. But since the customer support has confirmed that they are hosted locally, we can be somewhat confident in their safety. In the URL https://www.blacksford.com/yellowstone-rv-rentals I found an url not hosted locally https://cdn.polyfill.io/ . This URL has been sold to a shady Chinese company https://github.com/formatjs/formatjs/issues/4363 , and Cloudflare has issued a warning https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk , though only now does the domain starts to spread malicious code. So you should consider removing it.
  2. Hi, it is me again. After some digging, I finally found a page that is using polyfill: url https://www.blacksford.com/yellowstone-rv-rentals containing polyfill library https://cdn.polyfill.io/v3/polyfill.min.js?features=URL,Promise,Symbol,Symbol.iterator,Object.assign,Object.values,Object.entries,String.prototype.startsWith,String.prototype.endsWith,Intl,Intl.~locale.en-US,Intl.~locale.en-CA,Intl.~locale.fr-CA,Intl.~locale.en-AU,Intl.~locale.en-NZ&flags=gated . Please remove this. Do note that this might not be the only page containing polyfill library, you will need to scan ALL of your pages.
  3. It is a javascript file. I am not sure if you have removed anything after the warning, but the only file I see related to polyfill left in your site is //assets.squarespace.com/@sqs/polyfiller/1.6/modern.js . You can remove this file and submit again to see if it is the issue.
  4. Hello there, we encountered the same problem. It is caused by a compromised library, polyfill. You will need to remove all instances of polyfill in your website for it to work normally.
×
×
  • Create New...

Squarespace Webinars

Free online sessions where you’ll learn the basics and refine your Squarespace skills.

Hire a Designer

Stand out online with the help of an experienced designer or developer.