Bug#1139272: apostrophe: links to pollyfill.io, security danger, outdated package?

[Moritz Schlarb]

Dear Arturo,

On Sun, 07 Jun 2026 17:17:42 -0700 Arturo <mhmp2agug at mozmail.com> wrote:
>    Math enclosed in dollar signs woulden't render, and would cause it to
freeze the preview. upon deleting the math that caused it to freeze and
closing+reopening the preview a pollyfin.io authentication window popped up.
> 
>    I believe this may be an older package. Pollyfill was removed from many
programs/websites in 2024

I can not reproduce that at all.
Since apostrophe uses pandoc and mathjax under the hood - could you please
check whether you have any modifications related to their configuration?

Regards,
Moritz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 862 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20260619/2c828deb/attachment.sig>