Plus de 110 000 sites utilisant la biblioth\u00e8que JavaScript open source Polyfill pour assurer la compatibilit\u00e9 avec les anciennes versions des navigateurs ont \u00e9t\u00e9 victimes de modifications malveillantes apport\u00e9es au code de la biblioth\u00e8que par le nouveau propri\u00e9taire du projet. Un code malveillant a \u00e9t\u00e9 int\u00e9gr\u00e9 \u00e0 la biblioth\u00e8que, charg\u00e9e sur les sites via le domaine cdn.polyfill.io, redirigeant les utilisateurs vers des sites frauduleux (par exemple, googie-anaiytics.com), des bookmakers et des casinos en ligne.<\/p>\n
Le projet Polyfill a \u00e9t\u00e9 vendu en f\u00e9vrier \u00e0 la soci\u00e9t\u00e9 Funnull de Chine, qui a obtenu l'acc\u00e8s au compte GitHub et au site polyfill.io. Quelques mois apr\u00e8s l'acquisition, le nouveau propri\u00e9taire a organis\u00e9 un sch\u00e9ma de mon\u00e9tisation frauduleux li\u00e9 \u00e0 la redirection d'une partie des utilisateurs vers des sites douteux. La redirection se produisait avec une certaine probabilit\u00e9, \u00e0 certaines heures et sous des conditions pr\u00e9cises, comme l'ouverture du site depuis un t\u00e9l\u00e9phone mobile et l'absence de cookies signalant que la page avait \u00e9t\u00e9 ouverte par un administrateur de site. Lorsqu'un syst\u00e8me d'analyse web \u00e9tait d\u00e9tect\u00e9 sur le site, la redirection \u00e9tait retard\u00e9e de quelques secondes pour \u00e9viter d'appara\u00eetre dans les statistiques de ces syst\u00e8mes.<\/p>\n
Il est remarquable que le nouveau propri\u00e9taire supprime de GitHub toute plainte signalant une activit\u00e9 suspecte ou un changement de propri\u00e9taire, esp\u00e9rant apparemment que les utilisateurs consid\u00e9reront le passage automatique comme une initiative des auteurs des sites originellement ouverts.<\/p>\n
Les utilisateurs de Polyfill sont fortement encourag\u00e9s \u00e0 supprimer d\u00e8s que possible le code de chargement de la biblioth\u00e8que via l'h\u00f4te cdn.polyfill.io. Il est not\u00e9 qu'\u00e0 l'heure actuelle, les besoins en Polyfill n'existent plus, car tous les principaux navigateurs prennent en charge les Web API de mani\u00e8re ad\u00e9quate (Polyfill \u00e9value dynamiquement le navigateur actuel \u00e0 l'aide de l'en-t\u00eate User Agent et g\u00e9n\u00e8re des fonctions pour les navigateurs obsol\u00e8tes avec des impl\u00e9mentations des m\u00e9thodes, propri\u00e9t\u00e9s et API manquantes). <\/p>\n
Ceux qui ont toujours besoin de Polyfill peuvent utiliser les versions de la biblioth\u00e8que distribu\u00e9es par Fastly et Cloudflare, ou peuvent utiliser leur le serveur<\/a> copie locale bas\u00e9e sur le code du d\u00e9p\u00f4t avec un fork cr\u00e9\u00e9 par l'auteur original du projet. Des miroirs ont \u00e9t\u00e9 cr\u00e9\u00e9s en f\u00e9vrier en raison de doutes sur la fiabilit\u00e9 du nouveau propri\u00e9taire de domaine<\/a> polyfill.io. \u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0443\u044e \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043c\u0435\u043d cdn.polyfill.io, \u0431\u044b\u043b \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, googie-anaiytics.com), \u0431\u0443\u043a\u043c\u0435\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u043e\u0440\u044b \u0438 online-\u043a\u0430\u0437\u0438\u043d\u043e. \u041f\u0440\u043e\u0435\u043a\u0442 Polyfill \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0431\u044b\u043b \u043f\u0440\u043e\u0434\u0430\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116774","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Le changement de propri\u00e9taire de la biblioth\u00e8que Polyfill a entra\u00een\u00e9 l'injection de code malveillant sur 110 000 sites | ProHoster","description":"Plus de 110 000 sites utilisant la biblioth\u00e8que JavaScript Polyfill pour assurer la compatibilit\u00e9 avec les anciennes versions des navigateurs sont devenus des victimes de modifications malveillantes apport\u00e9es au code de la biblioth\u00e8que par un nouvel auteur.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043c\u0435\u043d\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Polyfill \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-25T22:05:43+00:00","article:modified_time":"2024-06-25T22:05:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116774","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 02:56:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=116774"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116774\/revisions"}],"predecessor-version":[{"id":163256,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/116774\/revisions\/163256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=116774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=116774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=116774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"