Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#7937 closed enhancement (fixed)

Remove NoScript blocks of WebFonts

Reported by: mikeperry Owned by: mikeperry
Priority: Medium Milestone:
Component: Firefox Patch Issues Version:
Severity: Keywords: tbb-pref, MikePerry201301
Cc: tails@… Actual Points: 1
Parent ID: #7248 Points:
Reviewer: Sponsor:

Description

During my audit of Firefox 17-ESR, I should look over the font parsing code and make sure they included Google's "Font Condom". If it's included and enabled, I think we can allow WebFonts by default.

Child Tickets

Change History (3)

comment:1 Changed 7 years ago by T(A)ILS developers

Cc: tails@… added

I see the maint-2.4 branch of TBB stops blocking WebFonts, and the FF17 alpha TBB blog post points to this ticket, which is still open. What's the current status? Is it safe to stop blocking WebFonts in upcoming Tails 0.17?

In case it might help: I've git grep'd -i condom on the iceweasel 17 source, and found no occurrence that looked like it was about a font.

comment:2 Changed 7 years ago by mikeperry

Actual Points: 1
Resolution: fixed
Status: newclosed

Yeah, "font condom" is not exactly a technical term. The code is called the "OpenType Sanitizer" library. It lives at https://code.google.com/p/ots/, and it is in the Firefox sourcedir in the gfx/ots directory. It does get built and linked in to Firefox.

comment:3 Changed 7 years ago by mikeperry

Keywords: MikePerry201301 added
Note: See TracTickets for help on using tickets.