Firefox3.1/Downloadable Fonts Security Review: Difference between revisions

Line 27: Line 27:
* What data is read or parsed by this feature?
* What data is read or parsed by this feature?


The @font-face feature works by downloading font data and passing it to system calls to create a font reference.  This is used to create a platform font and text is rendered the same way as with a platform font.   
**The @font-face feature works by downloading font data and passing it to system calls to create a font reference.  This is used to create a platform font and text is rendered the same way as with a platform font.   


* What is the output of this feature
* What is the output of this feature


Web pages rendered using downloaded fonts.
**Web pages rendered using downloaded fonts.


* What storage formats are used
* What storage formats are used


We will be supporting the automatic download of TrueType and OpenType fonts but not Embedded OpenType or Type 1 fonts.
**We will be supporting the automatic download of TrueType and OpenType fonts but not Embedded OpenType or Type 1 fonts.


== Reliability ==
== Reliability ==
241

edits