webpage asking for polyfill.io signin?

[hyeokhyen]

Checks

• I have searched the docs, existing issues, and existing discussions for answers first.

Link to your website repo

https://github.com/KwonVitalLab/KwonVitalLab.github.io

Version of Lab Website Template you are using

1.1.0

Description

It just happened today. When opening the webpage (https://kwonvitallab.github.io/), it asks for polyfill.io. When searching google, it says to remove any script including polyfill.io, but I could not find from the gitrepo. Could you help me with it?

[vincerubinetti]

view-source:https://kwonvitallab.github.io/

---

I think what is happening is that Jekyll Spaceship is auto-including MathJax and a polyfill. The MathJax version it's using is old. The polyfill is unnecessary because it is there for backwards compatibility with very very old browsers that almost no one uses, and that moreover the template doesn't support.

And it looks like polyfill.io has just recently started maliciously showing the login popup and has had security incidents in the past.

Can you try adding the following to your _config.yaml file to try to upgrade the MathJax version and exclude the polyfill:

jekyll-spaceship:
  mathjax-processor:
    src:
      - https://cdn.jsdelivr.net/npm/mathjax@4/tex-mml-chtml.js

Hopefully this does not make all the other Jekyll Spaceship defaults get un-set. Be on the lookout for that.

[hyeokhyen]

Great. That was a quick fix. Thank you always for your quick help!

[vincerubinetti]

I put the fix in the base template here:

#348