ru wikisource is loading external web fonts in violation of privacy policy
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Bawolff
	Mar 20 2019, 12:50 PM

Description

From https://ru.wikisource.org/wiki/MediaWiki:Common.css

/* Web Font CSS declaration for Church Slavonic fonts */
/* Slavonic Computing Initiative (https://sci.ponomar.net/) */

@font-face {
    font-family: 'Ponomar Unicode';
    src: url('https://sci.ponomar.net/fonts/PonomarUnicode.eot');
    src: url('https://sci.ponomar.net/fonts/PonomarUnicode.eot?#iefix') format('embedded-opentype'),
		url('https://sci.ponomar.net/fonts/PonomarUnicode.woff2') format('woff2'),
		url('https://sci.ponomar.net/fonts/PonomarUnicode.woff') format('woff'),
		url('https://sci.ponomar.net/fonts/PonomarUnicode.ttf') format('truetype');
    font-weight: normal;
    font-style: normal;
}

@font-face {
    font-family: 'Menaion Unicode';
    src: url('https://sci.ponomar.net/fonts/MenaionUnicode.eot');
    src: url('https://sci.ponomar.net/fonts/MenaionUnicode.eot?#iefix') format('embedded-opentype'),
		url('https://sci.ponomar.net/fonts/MenaionUnicode.woff2') format('woff2'),
		url('https://sci.ponomar.net/fonts/MenaionUnicode.woff') format('woff'),
		url('https://sci.ponomar.net/fonts/MenaionUnicode.ttf') format('truetype');
    font-weight: normal;
    font-style: normal;
}

Related Objects

Mentioned In: T219065: Adding fonts to Wikisource

Event Timeline

Bawolff created this task.Mar 20 2019, 12:50 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 20 2019, 12:50 PM

Bawolff added a project: Privacy.Mar 20 2019, 12:51 PM

Bawolff added subscribers: TheDJ, Vladis13.

According to https://phabricator.wikimedia.org/T208177#4703847 this should be "unbreak now" and potentially escalated to stewards?

The rules of ru.Wikisource has a permission to add texts written in Russian Church Slavonic, Old Church Slavonic, and Glagolitic script.
These are fonts for the ability to display them, otherwise they not shows. This site https://sci.ponomar.net/fonts.html is main source of fonts.
Although, seems on ru.Wikisource no texts using these fonts. They are transferred to the common Wikisource, where the text headers there have the link to this site for downloading fonts (example).

Is it possible to download these fonts from https://tools.wmflabs.org/ruwikisource/ with MediaWiki:Common.css?

Nikerabbit subscribed.Mar 20 2019, 10:22 PM

In T218775#5041455, @Vladis13 wrote:

The rules of ru.Wikisource has a permission to add texts written in Russian Church Slavonic, Old Church Slavonic, and Glagolitic script.
These are fonts for the ability to display them, otherwise they not shows. This site https://sci.ponomar.net/fonts.html is main source of fonts.
Although, seems on ru.Wikisource no texts using these fonts. They are transferred to the common Wikisource, where the text headers there have the link to this site for downloading fonts (example).

That's still considered a violation of the privacy policy (because people could in theory use it to track users and determine what IP corresponds to different logged in users).

Ideally the webfont could maybe be added to the ULS (https://www.mediawiki.org/wiki/Extension:UniversalLanguageSelector) extension

There's been some talk of allowing people to upload webfonts to wikimedia commons, but so far nothing has come of it.

We will try via the extention. Thank you!

Vladis13 added a subscriber: Lozman.Mar 22 2019, 1:15 AM

Vladis13 mentioned this in T219065: Adding fonts to Wikisource.Mar 23 2019, 12:57 PM

This got fixed in https://ru.wikisource.org/w/index.php?title=MediaWiki%3ACommon.css&type=revision&diff=3576545&oldid=3565553 hence resolving task.

@Bawolff: Can this task be made public?

Can this task be made public?

@Aklapper: why not, Bawolff have status "disabled".

Alright, making this task public.

Aklapper changed the visibility from "Custom Policy" to "Public (No Login Required)".May 27 2019, 9:36 AM

sbassett triaged this task as Medium priority.Oct 16 2019, 4:37 PM

sbassett moved this task from Intake to Done on the Privacy board.

• chasemp added a project: Security.Feb 10 2020, 10:57 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:16 PM

ru wikisource is loading external web fonts in violation of privacy policyClosed, ResolvedPublicActions

Description

Related Objects

Event Timeline

ru wikisource is loading external web fonts in violation of privacy policy
Closed, ResolvedPublic
Actions