- From: Chris Lilley via GitHub <sysbot+gh@w3.org>
- Date: Fri, 24 Jan 2020 10:22:43 +0000
- To: public-css-archive@w3.org
In terms of security, at least Chrome and Firefox use the [OpenType Font Sanitizer](https://github.com/khaledhosny/ots) whose reason for existence is: > However, on many platforms the system-level TrueType font renderers have never been part of the attack surface before, and putting them on the front line is a scary proposition... Especially on platforms like Windows, where it's a closed-source blob running with high privilege. There is currently no mention of this security aspect in the specification, so it seems that should go into this Security and Privacy section. -- GitHub Notification of comment by svgeesus Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4697#issuecomment-578072373 using your GitHub account
Received on Friday, 24 January 2020 10:22:45 UTC