JS Party: JavaScript, CSS, Web Development · Changelog Media

When 3rd party JavaScript attacks

August 29, 2024·53 min·5 clips

A Chinese company bought Polyfill.io and injected scripts that redirected users to adult sites and casinos.

The hosts and guest Simon Wickmans discuss the Polyfill.io attack, where a domain hijack led to malicious scripts affecting hundreds of thousands of websites. They explore broader risks of third-party JavaScript, including security vulnerabilities, privacy concerns, and practical mitigation strategies like self-hosting and monitoring.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from JS Party: JavaScript, CSS, Web Development