commit be2c61fff30c20801707a1fd8597e89de18b043f Author: Mike Perry mikeperry-git@fscked.org Date: Wed Dec 28 22:21:20 2011 -0600

Describe font limiting. --- docs/design/design.xml | 21 ++++++++++----------- 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/docs/design/design.xml b/docs/design/design.xml index 0a5df12..df15dbe 100644 --- a/docs/design/design.xml +++ b/docs/design/design.xml @@ -1233,18 +1233,17 @@ number of bits available to the adversary while avoiding the rendering and language issues of supporting a global font set.

</para> - <para><command>Design Goal:</command> - -We intend to <ulink -url="https://trac.torproject.org/projects/tor/ticket/2872%22%3Elimit the number of -fonts</ulink> a url bar origin can load, gracefully degrading to built-in -and/or remote fonts once the limit is reached. - - </para> <para><command>Implementation Status:</command>

-Aside from disabling plugins to prevent enumeration, we have not yet -implemented any defense against CSS or Javascript fonts. +We disable plugins, which prevents font enumeration. Additionally, we limit +both the number of font queries from CSS, as well as the total number of +fonts that can be used in a document by patching Firefox. We create two prefs, +<command>browser.display.max_font_attempts</command> and +<command>browser.display.max_font_count</command> for this purpose. Once these +limits are reached, the browser behaves as if +<command>browser.display.use_document_fonts</command> was reached. We are +still working to determine optimal values for these prefs. <!-- XXX: Link +patch and document pref values. -->

</para> </listitem> @@ -1298,7 +1297,7 @@ hooks</ulink> as well as a window observer to <ulink url="https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/chrome/content/torbutton.js#l4002">resize new windows based on desktop resolution</ulink>. Additionally, we patch Firefox to cause CSS Media Queries to use the client content window size -for all desktop size related media queries. <!-- FIXME: link patch --> +for all desktop size related media queries. <!-- XXX: link patch -->

</para> <para>