Page MenuHomePhabricator

MediaWiki:Vector.css on ka.wp loads TTF from external site
Closed, ResolvedPublic

Description

https://ka.wikipedia.org/w/index.php?title=მედიავიკი:Vector.css&oldid=3346188 loads a font from a third-party domain 150.ge.

That's a privacy violation and should be removed.

Event Timeline

Aklapper created this task.Oct 28 2018, 9:09 PM
Legoktm triaged this task as Unbreak Now! priority.Oct 29 2018, 6:34 PM
Legoktm added a subscriber: Legoktm.

I've escalated this to stewards at https://meta.wikimedia.org/wiki/Steward_requests/Miscellaneous#Please_remove_privacy_violating_site_CSS

In the future these kinds of issues should be treated as Unbreak Now!

Restricted Application added subscribers: Liuxinyu970226, TerraCodes. · View Herald TranscriptOct 29 2018, 6:34 PM

Also this managed to escape my audit-resources script, because it never hit a page with that font/CSS class I guess. We could try parsing the CSS with css-sanitizer and see where it flags?