local font load failure after latest firefox (android 8) update.
I am a retired software programmer. As a hobby, I design and develop apps for mobile and desktop devices. Firefox will run an html file from a local filesystem, Chrome will not. Besides, I just prefer firefox.
After the latest firefox (android) update, all the references to local fonts stopped working. The firefox developers, probably in closing security holes, caused my work to come to a screeching halt!!! They really F'd it up! And there is no reasonable alternative.
Give me back my work. Find another solution besides walling off the universe! Are they autocrats, czars, dictators, Kims, Putins? What's up with dictating rather than being part of free enterprise?
I'm so disappointed in Mozilla and firefox. I need an alternative. Any fixes or ideas?
All Replies (7)
It's me, Bill.
I searched w3schools.com for font usage in html and it offered Google's font library which has over 900 fonts. I put the...where is the rest of my reply?... Anyway,
Put theBill said
...where is the rest of my reply?... Anyway, Put the <link... in the html and all is well. </blockquote>
Do jot use quotes in this.
Bill said
Do not use quotes in this.
Hi Bill, is this an issue with file:// URLs and webfonts (local .woff/.woff2 files)?
I don't know whether this is relevant for Android, but perhaps so:
Firefox 68 contains a security patch which restricts the kinds of files that pages can load when you open them from a file:// URL. This change was made to prevent exfiltration of valuable data within reach of a local page, as demonstrated in an available exploit.
Font files don't seem that valuable, so hopefully there will be an exception for those in the future.
For now, though, if you need to see fonts retrieved on file:// URLs during local development, you can roll back the patch as follows:
(1) In a new tab, type or paste about:config in the address bar and tap Go.
(2) In the search box above the preferences list, type or paste uniq and pause while the list is filtered
(3) Tap the privacy.file_unique_origin preference to enable a Toggle button and then tap the Toggle button to switch the value from true to false
Does that do it?
P.S. This site tries to handle some HTML tags, so your unclosed link tag was causing a bit of rendering havoc there.