[tor-bugs] #20842 [Applications/Tor Browser]: Proposal: Improve Tor Browser font whitelist / bundled fonts

[Tor Bug Tracker & Wiki]

#20842: Proposal: Improve Tor Browser font whitelist / bundled fonts
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  assigned
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-usability, ux-team    |  Actual Points:
Parent ID:  #18097                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by winterflaw):

 Okay, so, I have some odd results to report.

 First, I checked security settings.  They're set to standard.

 Next, I followed the link you provided to CSS tricks.

 I'm doing what it says *except* the font-face rule in my code was not
 first, before any style rules.  I moved it, uploaded the CSS file,
 reloaded the site (shift+click on the reload icon) in Tor Browser.  No
 change.

 I then wanted to check the site in Firefox from a HTTP server.  After all,
 HTTP is fairly different to local and I had only checked Firefox from
 local disk.

 I copied the site to a normal, non-onion site I have (temporarily replaced
 the site there - only two files) and viewed the site in Firefox ESR
 (Debian 9).

 The Linear B font loaded correctly.

 I then put the original site back in place, and did a recursive chmod,
 changing all ownerships to "www-data" (files I upload through the Debian
 UI end up being my username - which should work fine, global "r"
 permission.

 I then went back to Tor Browser (which was still running - I'd not quit
 it) and reloaded the site - and hey presto, the font is showing.

 So, I no longer have a problem, but I don't know why.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20842#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online