Firefox 4: OpenType font feature support
hacks.mozilla.org
Firefox 4: OpenType font feature support
1–5 of 5 posts
Re: Firefox 4: OpenType font feature support
#2Great news for typography lovers.
Re: Firefox 4: OpenType font feature support
#3Fantastic :)
(Demo is a bit odd, though — it won’t let me use the backspace key to navigate back, no matter where I click.)
Re: Firefox 4: OpenType font feature support
#4Several years ago, the WebKit folks added support for web fonts (TrueType fonts, in particular). It seemed harmless enough.
They didn't talk to the core OS X people, who assumed that fonts would largely be trusted entities. The file format for TTF is quite complex, in reality, and allows for a wide variety of attack. At that time, there were dozens of easily exploitable vulnerabilities in how OS X handled TTF fonts.
Most of these have been fixed by now, however. I would assume the Mozilla foundation would have the foresight to avoid a repeat of such situations, and all rendering code would have been fully fuzzed.
Re: Firefox 4: OpenType font feature support
#5Several years ago, the WebKit folks added support for web fonts (TrueType fonts, in particular). It seemed harmless enough. They didn't talk to the core OS X people, who assumed that fonts would largely be trusted entities. The file format for TTF is quite complex, in reality, and allows for a wide variety of attack. At that time, there were dozens of easily exploitable vulnerabilities in how OS X handled TTF fonts.…
Yes, Mozilla's security does have a font fuzzer (along with the JavaScript fuzzer and DOM fuzzer that have been instrumental in finding security holes before the bad guys do):
http://www.squarefree.com/2010/07/14/fuzzing-talk-at-the-moz...
https://wiki.mozilla.org/Firefox3.1/Downloadable_Fonts_Secur...