[tor-bugs] #27258 [Applications/Tor Browser]: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Aug 22 05:13:50 UTC 2018


#27258: font whitelist means we don't have to set
gfx.downloadable_fonts.fallback_delay
-------------------------------------+-------------------------------------
     Reporter:  arthuredelstein      |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-fingerprinting-
     Severity:  Normal               |  font, ff60-esr
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 In 8455, "gfx.downloadable_fonts.fallback_delay" was set to -1 to avoid
 temporarily rendering a local font, which would allow its characters to be
 measured. But now that we whitelist fonts, it is probably OK to stop
 setting this pref. We should confirm that the fallback mechanism doesn't
 provide a whitelist bypass.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27258>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list