Oltre 110.000 siti web che utilizzano la libreria JavaScript open source Polyfill per garantire compatibilit\u00e0 con le versioni pi\u00f9 vecchie dei browser sono stati vittime di modifiche malevolente apportate al codice della libreria dal nuovo proprietario del progetto. Un codice malevolo \u00e8 stato incorporato nella libreria, scaricata sui siti tramite il dominio cdn.polyfill.io, che reindirizza l'utente verso siti truffaldini (come googie-anaiytics.com), scommesse online e casin\u00f2.<\/p>\n
Il progetto Polyfill \u00e8 stato venduto a febbraio alla societ\u00e0 Funnull in Cina, che ha ottenuto accesso all'account GitHub e al sito polyfill.io. Alcuni mesi dopo l'acquisto, il nuovo proprietario ha organizzato uno schema di monetizzazione fraudolento, collegato al reindirizzamento di parte degli utenti verso siti dubbi. Il reindirizzamento avveniva con una certa probabilit\u00e0, in orari specifici e al verificarsi di condizioni come l'accesso al sito da un telefono mobile e l'assenza di cookie che indicano che la pagina fosse stata aperta da un amministratore del sito. In caso di rilevamento di strumenti di web analytics, il reindirizzamento veniva ritardato di alcuni secondi per non emergere nelle statistiche di tali sistemi.<\/p>\n
\u00c8 interessante notare che il nuovo proprietario rimuove da GitHub qualsiasi segnalazione che indichi attivit\u00e0 sospette o cambio di propriet\u00e0, e sembra contare sul fatto che gli utenti considerino il reindirizzamento automatico come un'iniziativa degli autori dei siti inizialmente aperti.<\/p>\n
Si consiglia agli utenti di Polyfill di rimuovere il codice per caricare la libreria tramite l'host cdn.polyfill.io il prima possibile. Si osserva che nelle attuali realt\u00e0 non vi \u00e8 pi\u00f9 bisogno di Polyfill, poich\u00e9 tutti i principali browser supportano adeguatamente le API Web (Polyfill valuta dinamicamente il browser attuale in base all'intestazione User Agent e genera funzioni con l'implementazione dei metodi, delle propriet\u00e0 e delle API mancanti per i browser obsoleti). <\/p>\n
Coloro che hanno ancora bisogno di Polyfill possono utilizzare le varianti della libreria fornite da aziende come Fastly e Cloudflare, oppure possono utilizzare una server<\/a> copia locale basata sul codice del repository con un fork creato dall'autore originale del progetto. I mirror sono stati creati a febbraio a causa di dubbi sulla affidabilit\u00e0 del nuovo proprietario di dominio<\/a> polyfill.io. \u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0443\u044e \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043c\u0435\u043d cdn.polyfill.io, \u0431\u044b\u043b \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, googie-anaiytics.com), \u0431\u0443\u043a\u043c\u0435\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u043e\u0440\u044b \u0438 online-\u043a\u0430\u0437\u0438\u043d\u043e. \u041f\u0440\u043e\u0435\u043a\u0442 Polyfill \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0431\u044b\u043b \u043f\u0440\u043e\u0434\u0430\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116774","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Il cambio di propriet\u00e0 della libreria Polyfill ha portato all'inserimento di codice malevolo su 110.000 siti web | ProHoster","description":"Oltre 110.000 siti web che utilizzano la libreria JavaScript open source Polyfill per garantire la compatibilit\u00e0 con versioni obsolete dei browser sono stati vittime di modifiche dannose apportate al codice della libreria da un nuovo proprietario.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043c\u0435\u043d\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Polyfill \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-25T22:05:43+00:00","article:modified_time":"2024-06-25T22:05:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116774","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 02:56:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=116774"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116774\/revisions"}],"predecessor-version":[{"id":163256,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/116774\/revisions\/163256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=116774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=116774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=116774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"