Replace polyfillurl to avoid security vulnerabilities

Replace polyfillurl to avoid security vulnerabilities #1529