Ghost still uses the polyfill.io in the {{ghost_foot}} even though the domain is blocked

[kustodian]

Issue Summary

Due to the security breach, the domain polyfill.io is blocked everywhere.

The latest version of Ghost is 5.130.0, as of this writing, is generating this code in the {{ghost_foot}}:

<script src="https://polyfill.io/v3/polyfill.min.js?features=es6"></script>

The problem with this is that the plugin doesn't load; even worse, it slows down the blog's loading time. I guess Ghost uses this as a dependency of superagent, so is this issue going to be fixed by just updating superagent? I found this PR, which bumps it to the newer version.

Steps to Reproduce

Just make sure the theme loads {{ghost_foot}}, load any page, check the network tab in the browser, and filter by the polyfill.io domain.

Ghost Version

5.130.0

Node.js Version

20.19.4

How did you install Ghost?

Official docker container

Database type

SQLite3

Browser & OS version

No response

Relevant log / error output

Code of Conduct

• I agree to be friendly and polite to people in this repository

[kevinansfield]

This sounds like something specific to your theme or your site's footer code injection content, Ghost doesn't use any polyfill.io domains in core or its official themes.

[alarcritty]

Hey @kustodian can i work on this issue?

[kustodian]

@kevinansfield my bad, I missed this in the footer part of the injection, I have no idea how :D