3 ms·
Both Firefox and Chrome use font sanitizers[1]. I'm not sure about others, Opera probably does since it's just a Chromium fork and OTS is part of the WTF (webk
by ryuuchin 10y ago
Both Firefox and Chrome use font sanitizers[1]. I'm not sure about others, Opera probably does since it's just a Chromium fork and OTS is part of the WTF (webkit tools framework). AFAIK its been used for quite some time now, several years+.
The license for OTS is permissive so I don't see why it couldn't also be used in Edge/IE although I've no idea if they do (or if they rolled their own even).
[1] https://github.com/khaledhosny/ots https://github.com/khaledhosny/ots
- acqq 10y agoAnd it seems that Flash and Adobe Reader don't use the sanitizers, according to the article? Tangential, anybody knows how Apple handles fonts?
- ryuuchin 10y agoReading commit messages from Chrome's support[1][2][3] for win32k system call disable mitigation (aka win32k lockdown) on Windows (specifically for PPAPI plugins) I think Flash, at least in Chrome, loads fonts from the browser. Which would mean it gets passed through OTS. I think all processes now share a common font cache on Chrome or at the very least they share code related to handling fonts. Just looking at the fact that Flash still works with win32k lockdown enabled (meaning it can't use any GDI system calls) is probably enough evidence on its own (maybe). I don't know how other browsers handle font handling with Flash. [1] https://bugs.chromium.org/p/chromium/issues/detail?id=523278 https://bugs.chromium.org/p/chromium/issues/detail?id=523278 [2] https://bugs.chromium.org/p/chromium/issues/detail?id=523278#c11 https://bugs.chromium.org/p/chromium/issues/detail?id=523278... [3] https://bugs.chromium.org/p/chromium/issues/detail?id=523278#c19 https://bugs.chromium.org/p/chromium/issues/detail?id=523278...