{"action":"created","issue":{"url":"https://api.github.com/repos/gorhill/uBlock/issues/1539","repository_url":"https://api.github.com/repos/gorhill/uBlock","labels_url":"https://api.github.com/repos/gorhill/uBlock/issues/1539/labels{/name}","comments_url":"https://api.github.com/repos/gorhill/uBlock/issues/1539/comments","events_url":"https://api.github.com/repos/gorhill/uBlock/issues/1539/events","html_url":"https://github.com/gorhill/uBlock/issues/1539","id":146178908,"number":1539,"title":"no-remote-fonts option not working","user":{"login":"icasdri","id":9786418,"avatar_url":"https://avatars.githubusercontent.com/u/9786418?v=3","gravatar_id":"","url":"https://api.github.com/users/icasdri","html_url":"https://github.com/icasdri","followers_url":"https://api.github.com/users/icasdri/followers","following_url":"https://api.github.com/users/icasdri/following{/other_user}","gists_url":"https://api.github.com/users/icasdri/gists{/gist_id}","starred_url":"https://api.github.com/users/icasdri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/icasdri/subscriptions","organizations_url":"https://api.github.com/users/icasdri/orgs","repos_url":"https://api.github.com/users/icasdri/repos","events_url":"https://api.github.com/users/icasdri/events{/privacy}","received_events_url":"https://api.github.com/users/icasdri/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2016-04-06T03:44:29Z","updated_at":"2016-04-08T03:18:59Z","closed_at":null,"body":"uBlock Origin's `no-remote-fonts: * true` option (i.e. by checking \"Block remote fonts\" in Settings or adding that line to rules) does *not* have the desired effect of blocking `@font-face` remote webfonts from being downloaded/used. \r\n\r\n`@font-face` fonts are still downloaded/used even when the option is enabled. This can be seen in Firefox's Font Inspector. Below is an example with http://arstechnica.com.\r\n\r\n<img src=\"http://i.imgur.com/QJj3Ugn.png\" height=\"400\">\r\n\r\nNotice that uBlock Origin's font blocking option is enabled per the red X in bottom-right of popup, yet the `@font-face` remote webfonts are still being used per Inspector (example of \"Bebas Nueue\" present in screenshot; this is also easily seen in the difference in page rendering).\r\n\r\nNote that setting Firefox's built-in `gfx.downloadable_fonts.enabled` to `false` *does* have the desired effect (see Steps to Reproduce below), but this ruins uBlock Origin's popup UI as discussed in #15 when this feature was first introduced.\r\n\r\n**Steps to reproduce:**\r\n\r\n1. Visit a site with webfonts, e.g. http://arstechnica.com, open `Inspector`, click on `Fonts` tab, observe that a number of `@font-face` remote webfonts are being used.\r\n2. Enable \"Block remote fonts\" in uBlock Origin's settings (or add the appropriate rule)\r\n3. Visit the site again (force disable cache and refresh), and observe in Font Inspector that the `@font-face` webfonts are still being used.\r\n4. Set `gfx.downloadable_fonts.enabled` to `false` in `about:config` (from #15, this is what no-remote-fonts is supposed to accomplish without uBlock's interface breaking)\r\n5. Visit the site again, and observe in Font Inspector that all fonts are now \"system\" fonts, and no `@font-face` are used.\r\n6. Set `gfx.downloadable_fonts.enabled` back to `true`, while keeping uBlock Origin's \"Block remote fonts\" option, and observe on the site in Font Inspector that the `@font-face` webfonts come back, signifying that uBlock's option has no effect.\r\n\r\n**Version information:**\r\n* Firefox 45.0.1 (new profile, no other extensions, running on latest Arch Linux)\r\n* uBlock Origin 1.6.8 (fresh from AMO, no other settings changed)"},"comment":{"url":"https://api.github.com/repos/gorhill/uBlock/issues/comments/207193498","html_url":"https://github.com/gorhill/uBlock/issues/1539#issuecomment-207193498","issue_url":"https://api.github.com/repos/gorhill/uBlock/issues/1539","id":207193498,"user":{"login":"lewisje","id":4865237,"avatar_url":"https://avatars.githubusercontent.com/u/4865237?v=3","gravatar_id":"","url":"https://api.github.com/users/lewisje","html_url":"https://github.com/lewisje","followers_url":"https://api.github.com/users/lewisje/followers","following_url":"https://api.github.com/users/lewisje/following{/other_user}","gists_url":"https://api.github.com/users/lewisje/gists{/gist_id}","starred_url":"https://api.github.com/users/lewisje/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lewisje/subscriptions","organizations_url":"https://api.github.com/users/lewisje/orgs","repos_url":"https://api.github.com/users/lewisje/repos","events_url":"https://api.github.com/users/lewisje/events{/privacy}","received_events_url":"https://api.github.com/users/lewisje/received_events","type":"User","site_admin":false},"created_at":"2016-04-08T03:18:59Z","updated_at":"2016-04-08T03:18:59Z","body":"That's a bit too heavy-handed, because it keeps *all* page-specified fonts, even fonts loaded from the local machine rather than the Web (a.k.a. \"non-web\" fonts), from working unless they're in that small set of allowed fonts; for example, it would keep Verdana from being used on a page if Arial is set as the default sans-serif."}}