Bug#833614: firefox: refuses to load fonts from /usr/share when viewing HTML documentation in /usr/share/doc

Sean Whitton spwhitton at spwhitton.name
Sat Aug 6 23:38:53 UTC 2016


Package: firefox
Version: 48.0-1
Severity: minor
Affects: projectile-doc

Dear maintainer,

My package projectile-doc installs HTML documentation into
/usr/share/doc.  The webpages under this directory try to load
fontawesome-webfont.eot from /usr/share/fonts (via a chain of several
symlinks, traversing /usr/share/mkdocs).  Thanks to Firefox's
same-origin policy, Firefox refuses to load this font and the glyphs do
not appear.  This is not a problem for other web browsers which might be
used to look at projectile-doc's documentation.

If there is a sane way to make an exception, it would be good if the
Debian packaging of Firefox ignored the same-origin policy for pages in
/usr/share/doc trying to load external resources.  We can trust the
contents of those pages, since they come from Debian packages.  Perhaps
all of /usr/share could be considered an origin.

There is some relevant discussion in this upstream bug:
<https://bugzilla.mozilla.org/show_bug.cgi?id=760436>

Thanks for considering this bug report.

-- Package-specific info:

-- Extensions information
Name: Classic Theme Restorer
Location: /usr/share/xul-ext/classic-theme-restorer
Package: xul-ext-classic-theme-restorer
Status: enabled

Name: Default theme
Location: /usr/lib/firefox/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Package: firefox
Status: enabled

Name: DownThemAll!
Location: ${PROFILE_EXTENSIONS}/{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
Status: enabled

Name: EPUBReader
Location: ${PROFILE_EXTENSIONS}/{5384767E-00D9-40E9-B72F-9CC39D655D6F}
Status: enabled

Name: Firefox Hello
Location: ${PROFILE_EXTENSIONS}/loop at mozilla.org.xpi
Status: enabled

Name: Instaread (Instapaper Bookmarklet)
Location: ${PROFILE_EXTENSIONS}/@instaread.xpi
Status: enabled

Name: It's All Text!
Location: ${PROFILE_EXTENSIONS}/itsalltext at docwhat.gerf.org
Status: enabled

Name: KeySnail
Location: ${PROFILE_EXTENSIONS}/keysnail at mooz.github.com
Status: enabled

Name: LeechBlock
Location: ${PROFILE_EXTENSIONS}/{a95d8332-e4b4-6e7f-98ac-20b733364387}
Status: user-disabled

Name: Multi-process staged rollout
Location: ${PROFILE_EXTENSIONS}/e10srollout at mozilla.org.xpi
Status: enabled

Name: Pocket
Location: ${PROFILE_EXTENSIONS}/firefox at getpocket.com.xpi
Status: enabled

Name: Save Images
Location: ${PROFILE_EXTENSIONS}/LDSI_plashcor at gmail.com.xpi
Status: enabled

Name: Self-Destructing Cookies
Location: /usr/share/xul-ext/self-destructing-cookies
Package: xul-ext-self-destructing-cookies
Status: enabled

Name: uBlock Origin
Location: /usr/share/xul-ext/ublock-origin
Package: xul-ext-ublock-origin
Status: enabled

Name: Y U no validate
Location: /usr/share/xul-ext/y-u-no-validate
Package: xul-ext-y-u-no-validate
Status: enabled

-- Plugins information
Name: IcedTea-Web Plugin (using IcedTea-Web 1.6.2 (1.6.2-3))
Location: /usr/lib/jvm/java-8-openjdk-i386/jre/lib/i386/IcedTeaPlugin.so
Package: icedtea-8-plugin:i386
Status: enabled


-- Addons package information
ii  firefox                          48.0-1       i386         Mozilla Firefox web browser
ii  icedtea-8-plugin:i386            1.6.2-3      i386         web browser plugin based on OpenJDK and IcedTea to execute Java applets
ii  xul-ext-classic-theme-restorer   1.5.5.1-1    all          customize the new Firefox interface
ii  xul-ext-self-destructing-cookies 0.4.10-1     all          delete cookies and LocalStorage after tabs using them have been closed
ii  xul-ext-ublock-origin            1.8.2+dfsg-1 all          general-purpose lightweight ads, malware, trackers blocker
ii  xul-ext-y-u-no-validate          2013052407-2 all          browser extension to make security exceptions temporary by default

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.5.0-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firefox depends on:
ii  debianutils               4.8
ii  fontconfig                2.11.0-6.4
ii  libasound2                1.1.1-2
ii  libatk1.0-0               2.20.0-1
ii  libc6                     2.23-4
ii  libcairo2                 1.14.6-1+b1
ii  libdbus-1-3               1.10.8-1
ii  libdbus-glib-1-2          0.106-1
ii  libevent-2.0-5            2.0.21-stable-2+b1
ii  libffi6                   3.2.1-4
ii  libfontconfig1            2.11.0-6.4
ii  libfreetype6              2.6.3-3+b1
ii  libgcc1                   1:6.1.1-10
ii  libgdk-pixbuf2.0-0        2.34.0-1
ii  libglib2.0-0              2.48.1-2
ii  libgtk2.0-0               2.24.30-4
ii  libhunspell-1.4-0         1.4.1-2
ii  libnspr4                  2:4.12-2
ii  libnss3                   2:3.23-2
ii  libpango-1.0-0            1.40.1-1
ii  libsqlite3-0              3.13.0-1
ii  libstartup-notification0  0.12-4
ii  libstdc++6                6.1.1-10
ii  libvpx3                   1.5.0-3
ii  libx11-6                  2:1.6.3-1
ii  libxcomposite1            1:0.4.4-1
ii  libxdamage1               1:1.1.4-2+b1
ii  libxext6                  2:1.3.3-1
ii  libxfixes3                1:5.0.2-1
ii  libxrender1               1:0.9.9-2
ii  libxt6                    1:1.1.5-1
ii  procps                    2:3.3.12-2
ii  zlib1g                    1:1.2.8.dfsg-2+b1

firefox recommends no packages.

Versions of packages firefox suggests:
ii  fonts-lmodern          2.004.5-3
ii  fonts-stix [otf-stix]  1.1.1-4
ii  libcanberra0           0.30-3
ii  libgnomeui-0           2.24.5-3.1
ii  libgssapi-krb5-2       1.14.2+dfsg-1
pn  mozplugger             <none>

-- no debconf information

-- 
Sean Whitton
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20160806/f299b826/attachment.sig>


More information about the pkg-mozilla-maintainers mailing list