5 ms·
"Pulling a font for a domain"—wtf, isn't the client making the request? Why detect anything, just require a referrer on your allow-list, and deny if it's not th
by alabastervlog 1y ago
"Pulling a font for a domain"—wtf, isn't the client making the request? Why detect anything, just require a referrer on your allow-list, and deny if it's not there.
- badmintonbaseba 1y agoAn allow-list would probably suck for local development for users that do have a valid license.