Bug#747317: iceweasel: missing/buggy support for @font-face (breaks twitter and others)

[Mike Hommey]

On Wed, May 07, 2014 at 02:18:52PM +0200, Cyril Brulebois wrote:
> Package: iceweasel
> Version: 24.5.0esr-1
> Severity: normal
> 
> Hi,
> 
> @font-face is supposed to be supported, as documented in:
>   https://developer.mozilla.org/en-US/docs/Web/CSS/@font-face
> 
> but even the live example there doesn't work in iceweasel: one gets a
> non-bold, default font instead.

That page happens to be broken. If you open the web console, you'll see
that it's broken because of CORS. Even if changing the font url to fix
the CORS issue, it then fails because the font is rejected by the
sanitizer.

> For websites pointing at online fonts, using characters from some private
> Unicode plane, that means an “unknown glyph” character instead of
> icons/buttons, which makes the use of websites like twitter or gitlab
> quite painful.
> 
> I'm attaching twitter snapshots (ok = chromium, ko = iceweasel). You can
> check what happens with gitlab on the live demo site:
>   http://demo.gitlab.com/

I'm not sure what i should be looking at there.
I don't have a twitter account so I can't check that either.

Mike