New font not shoring up in boxy svg1/9/2023 ![]() Inspired by the fresh green of spring, I’d like to announce The Evergreen List. But today, the sun is shining, it’s getting warmer, and nature is flourishing. Give the page a try and if you have feedback, just email me.Īfter spring has started marvelously, this week brought us some snow again. This is a sub-part of my reading list, collecting important links that stay relevant over a longer time so that you can find them more easily. This new API is behind a permission prompt, making this an active fingerprinting target.After spring has started marvelously, this week brought us some snow again. Is this feature fully tested by web-platform-tests ? This API does not change the behavior of any other existing APIs. In light of those existing vectors, we do not believe this new API contributes meaningfully to new fingerprintability, and we assert that future privacy enhancements should be applied equally across all font-based vectors.ĭoes this intent deprecate or change behavior of existing APIs, such that it has potentially high risk for Android WebView-based applications? via CSS and Canvas) have been considered in non-Chromium-based browsers, and should be considered for Chrome as well, but are outside the scope of this I2S. Mitigations to existing passive fingerprinting vectors using local fonts (i.e. See the TAG review's security and privacy questionnaire for more info: This new API is behind a permission prompt, making this an active fingerprinting target. The API provides access to full font data in local fonts which can expose additional information about a user's installed configuration to a web application. Providing additional metadata or events to notify web apps of changes to fonts, to refresh caches. Fonts often contain metadata with language tags, but OS APIs for enumerating fonts typically return only the metadata for the active language. Querying font metadata in specific languages. fonts that are part of the operating system base installation. Querying for only "low entropy" fonts, i.e. This would be equivalent to the CSS "system-ui" generic font family. Querying for a "system UI" font, for web applications that render text with their own text stack and need access to the full font data, but wish to match the local system appearance. Several such additions are under consideration: The API is designed to support additional functionality in the future. ![]() Usage of this API by an average web developer will require additional text shaping software that would render fonts based on data returned by this API. The API makes it possible for web developers to implement a font picker (either UI-driven or algorithmic) and API usage will see more traction once popular UI libraries build font pickers on top of it.Ĭontent for this API is available immediately since the API uses locally-installed fonts that are already present on the user's system. (See the Explainer for more details.) That may limit use.ĭevelopers will be able to take advantage of this feature immediately since it uses the same available local fonts that other native applications have access to. The feature builds both enumeration and data access into the same new API. Web developers: Strongly positive ( ) Very positive support from web applications that interact with local fonts, such as Figma. If this feature were removed from the platform, web applications would lose the ability to enumerate local fonts and retrieve font data but otherwise are expected to continue to function. We expect developers using this API to design their web applications to use web-based fonts as the primary set of font choices, but allow users to opt-in to take advantage of their local fonts for specific design needs. ![]() This API has been designed to support feature detection to allow applications to gracefully degrade based on the capabilities different user agents offer. Today, no API exists to provide a list of local fonts to web applications.Īlso gives web applications access to the font data as a binary blob, allowing those fonts to be rendered within their applications using custom text stacks. Gives web applications the ability to enumerate local fonts and some metadata about each. ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |