Remove recommendation for polyfill.io as it is no longer considered safe to use

[marcusx]

The README recommends

Choices/README.md

Line 1115 in 5dbea28

<script src="https://cdn.polyfill.io/v3/polyfill.min.js?features=Array.from%2Ces5%2Ces6%2CSymbol%2CSymbol.iterator%2CDOMTokenList%2CObject.assign%2CCustomEvent%2CElement.prototype.classList%2CElement.prototype.closest%2CElement.prototype.dataset%2CArray.prototype.find%2CArray.prototype.includes"></script>

This is no longer considered safe to use.

See:

• https://polykill.io/
• https://twitter.com/triblondon/status/1761852117579427975
• https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk

[alanhamlett]

#1161

[jurgenhaas]

I guess, the link doesn't need to be removed, it could be replaced with a save alternative, e.g. from fastly.

[alanhamlett]

No, it's dangerous even mentioning polyfill and no longer needed.

[BramDriesen]

it's dangerous even mentioning polyfill

Not sure where that's coming from. It's not like you can just drop it. There is an safe alternative so let's use that, no?

[mbomb007]

No, it's dangerous even mentioning polyfill and no longer needed.

polyfill is a word that has a meaning, not just a reference to a bad URL, so I disagree.

[alanhamlett]

Implemented with #1161