Polyfill

What we can learn from the polyfill.js attack