isce-framework / isce-framework/isce3
`Polyfill.io` Dependency Redirects to Credential Phishing Site on Docs Site
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 239
- Forks
- 90
- Avg merge
- 13d 1h
- Merged PRs (30d)
- 5
Description
Clicking the Python API section in the docs site redirects users to a username/password phishing prompt.
Steps to recreate:
- Navigate to https://isce-framework.github.io/isce3/
- Click on
Python API
Fixing this requires removing Polyfill.io as a dependency.
ars technica article on subject:
https://arstechnica.com/security/2024/07/384000-sites-link-to-code-library-caught-performing-supply-chain-attack/
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the docs site and inspect the Python API link and the dependency path that brings in Polyfill.io. Remove that dependency, then verify that clicking Python API no longer redirects to the credential-phishing prompt.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- documentation, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100