From 6392a8ff4aae60b68ed951c3646d3e947fce6b7d Mon Sep 17 00:00:00 2001
From: shubham sharma <sharma.shubham2811@gmail.com>
Date: Sat, 6 Jul 2024 01:19:23 +0530
Subject: [PATCH] Replace polyfillurl to avoid security vulnerabilities (#2018)

* chore: replace `polyfill.io`

* fix(changelog): add change log

---------

Co-authored-by: SukkaW <isukkaw@gmail.com>
---
 .../replace-ployfillurl_2024-07-03-15-06.json          | 10 ++++++++++
 packages/subapp-web/lib/polyfill.js                    |  2 +-
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100644 common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json

diff --git a/common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json b/common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json
new file mode 100644
index 000000000..8daac3105
--- /dev/null
+++ b/common/changes/subapp-web/replace-ployfillurl_2024-07-03-15-06.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "subapp-web",
+      "comment": "replace polyfill.io url to avoid security issues",
+      "type": "patch"
+    }
+  ],
+  "packageName": "subapp-web"
+}
\ No newline at end of file
diff --git a/packages/subapp-web/lib/polyfill.js b/packages/subapp-web/lib/polyfill.js
index 8e83b1715..bd1d2d02c 100644
--- a/packages/subapp-web/lib/polyfill.js
+++ b/packages/subapp-web/lib/polyfill.js
@@ -3,7 +3,7 @@
 module.exports = function setup() {
   return {
     process() {
-      return `<script src="https://polyfill.io/v3/polyfill.min.js?features=es5,es6&flags=gated"></script>`;
+      return `<script src="https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=es5,es6&flags=gated"></script>`;
     }
   };
 };