Page MenuHomePhabricator

MediaWiki:Vector.css on ka.wp loads TTF from external site
Closed, ResolvedPublic

Descriptionმედიავიკი:Vector.css&oldid=3346188 loads a font from a third-party domain

That's a privacy violation and should be removed.

Event Timeline

Aklapper created this task.Oct 28 2018, 9:09 PM
Legoktm triaged this task as Unbreak Now! priority.Oct 29 2018, 6:34 PM
Legoktm added a subscriber: Legoktm.

I've escalated this to stewards at

In the future these kinds of issues should be treated as Unbreak Now!

Restricted Application added subscribers: Liuxinyu970226, TerraCodes. · View Herald TranscriptOct 29 2018, 6:34 PM

Also this managed to escape my audit-resources script, because it never hit a page with that font/CSS class I guess. We could try parsing the CSS with css-sanitizer and see where it flags?

sbassett moved this task from Backlog to Done on the Privacy board.Oct 16 2019, 4:35 PM