[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #27258 [Applications/Tor Browser]: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay

#27258: font whitelist means we don't have to set
gfx.downloadable_fonts.fallback_delay
-------------------------------------+-------------------------------------
     Reporter:  arthuredelstein      |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-fingerprinting-
     Severity:  Normal               |  font, ff60-esr
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 In 8455, "gfx.downloadable_fonts.fallback_delay" was set to -1 to avoid
 temporarily rendering a local font, which would allow its characters to be
 measured. But now that we whitelist fonts, it is probably OK to stop
 setting this pref. We should confirm that the fallback mechanism doesn't
 provide a whitelist bypass.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27258>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs