[tor-bugs] #27258 [Applications/Tor Browser]: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Aug 22 05:13:50 UTC 2018
#27258: font whitelist means we don't have to set
gfx.downloadable_fonts.fallback_delay
-------------------------------------+-------------------------------------
Reporter: arthuredelstein | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: tbb-fingerprinting-
Severity: Normal | font, ff60-esr
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------+-------------------------------------
In 8455, "gfx.downloadable_fonts.fallback_delay" was set to -1 to avoid
temporarily rendering a local font, which would allow its characters to be
measured. But now that we whitelist fonts, it is probably OK to stop
setting this pref. We should confirm that the fallback mechanism doesn't
provide a whitelist bypass.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27258>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list