[tor-bugs] #25489 [Webpages/Styleguide]: Implement a fallback mechanism for icon fonts and SVGs used in CSS for high-security mode

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Jul 20 14:39:44 UTC 2019


#25489: Implement a fallback mechanism for icon fonts and SVGs used in CSS for
high-security mode
---------------------------------+----------------------
 Reporter:  cypherpunks          |          Owner:  hiro
     Type:  enhancement          |         Status:  new
 Priority:  Low                  |      Milestone:
Component:  Webpages/Styleguide  |        Version:
 Severity:  Normal               |     Resolution:
 Keywords:                       |  Actual Points:
Parent ID:                       |         Points:
 Reviewer:                       |        Sponsor:
---------------------------------+----------------------

Comment (by torlove):

 Is there anything about Font Awesome itself that is unsafe for the safest
 mode? If not, what is stopping Tor Browser from simply embedding the font
 (or fonts, to be backwards compatible) into the app? Is it a licensing
 concern?

 On a related note, Tor Browser might do well to include the 50 most
 popular web fonts, out of the box.

 If this is a possibility, tell me and I will volunteer time to research
 the 50 most popular webfonts that can legally be included. There are
 available statistics on popular fonts. I will also seek to supply web
 developers with a wide variety of font styles (including extended, narrow,
 slab, script, calligraphic, etc) such that any privacy aware web developer
 can easily find a fonts from our selection to either completely fulfil
 their needs, or provide a good fallback.

 In the interests on onboarding as many participants as possible and
 reducing the bandwidth on the Tor network we should provide the basics.
 Webfonts today are used so prevalently that we simply cannot completely
 ignore all font requests. Even, in the safer modes.

 Yes these caches may need to be updated from time to time as more glyphs
 are developed, but not strictly necessary.

 To summarise:
 - Can Font Awesome be supported by being packaged into Tor Browser itself?
 - Can we provide some support for popular webfonts in a similar manner?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25489#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list