Tool "montage" loads fonts from google
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	zhuyifei1999
	Aug 7 2017, 8:17 PM

Description

https://tools.wmflabs.org/montage-beta/: https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=latin,latin-ext
https://tools.wmflabs.org/montage-beta/: https://fonts.gstatic.com/s/roboto/v16/5M21SdFLkD52QavfmHs6cA.ttf
https://tools.wmflabs.org/montage-beta/: https://fonts.gstatic.com/s/roboto/v16/oOeFwZNlrTefzLYmlVV1UKCWcynf_cDxXwCLxiixG1c.ttf
https://tools.wmflabs.org/montage-dev/: https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=latin,latin-ext
https://tools.wmflabs.org/montage-dev/: https://fonts.gstatic.com/s/roboto/v16/5M21SdFLkD52QavfmHs6cA.ttf
https://tools.wmflabs.org/montage-dev/: https://fonts.gstatic.com/s/roboto/v16/oOeFwZNlrTefzLYmlVV1UKCWcynf_cDxXwCLxiixG1c.ttf

Loading from external providers are discouraged. Please see parent tasks and J65.
In your case a direct replacement would be:

Related Objects
Search...

Status	Assigned	Task
Open	None	T133919 [EPIC] Protect end-user privacy by restricting non-consensual third-party browser interactions
Open	None	T130748 Add Content-Security-Policy header enforcing 3rd party web interaction restrictions to proxy responses
Open	None	T172065 Hunt for Toolforge tools that load resources from third party sites
Open	None	T172741 Tool "montage" loads fonts from google

Event Timeline

zhuyifei1999 created this task.Aug 7 2017, 8:17 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 7 2017, 8:17 PM

Yarl claimed this task.Sep 7 2017, 2:47 PM

Yarl added a project: Montage.

Ping @Yarl :)
Issue created: https://github.com/hatnote/montage/issues/124

Fixed!

For me these two external files are still loaded from https://tools.wmflabs.org/montage-beta/:
https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&subset=latin,latin-ext
https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

@Slaporte Hello, can you fix the beta instance as well ? Perhaps by syncing it with the last git version. Thanks !

This task has been assigned to the same task owner for more than two years. Resetting task assignee due to inactivity, to decrease task cookie-licking and to get a slightly more realistic overview of plans. Please feel free to assign this task to yourself again if you still realistically work or plan to work on this task - it would be welcome!

For tips how to manage individual work in Phabricator (noisy notifications, lists of task, etc.), see https://phabricator.wikimedia.org/T228575#6237124 for available options.
(For the records, two emails were sent to assignee addresses before resetting assignees. See T228575 for more info and for potential feedback. Thanks!)

leila removed a subscriber: leila.Jun 19 2020, 10:28 PM

Tool "montage" loads fonts from googleOpen, Needs TriagePublicActions

Description

Related ObjectsSearch...

Event Timeline

Tool "montage" loads fonts from google
Open, Needs TriagePublic
Actions

Related Objects
Search...