[tor-bugs] #33430 [Applications/Tor Browser]: Disable downloadable fonts on Safest security level

[Tor Bug Tracker & Wiki]

#33430: Disable downloadable fonts on Safest security level
--------------------------------------+------------------------------
 Reporter:  dcent                     |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_review
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  TorBrowserTeam202002R     |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:  acat                      |        Sponsor:
--------------------------------------+------------------------------

Comment (by Thorin):

 Replying to [comment:12 dcent]:
 > In the highest security level fonts are already blocked and I understand
 that's for a reason

 No they're not, only **some** fonts **types** are blocked: graphite and
 opentype_svg. That doesn't mean we should just block all downloadable
 fonts. All I'm asking is what is the actual threat here - because TBH I'm
 not seeing one yet, and this affects usability (ligatures and icon fonts
 are widespread)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33430#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online