The Steampunk Forum at Brass Goggles
May 26, 2013, 02:25:35 am *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Subscription-style donations available now! See this page for more information.
 
   Home   Help Login Register  

Pages: [1]   Go Down
  Print  
Author Topic: https style file references http font file  (Read 626 times)
oldskoolpunk
Zeppelin Captain
*****
United States United States


WWW
« on: June 21, 2012, 03:48:28 am »

A https style file on the site references a http font file.  Firefox 14 considers this a cross-site scripting error and won't load the font. 

Code:
Timestamp: 6/20/2012 7:36:52 PM
Error: downloadable font: download failed (font-family: "JaneAusten" style:normal weight:normal stretch:normal src index:1): bad URI or cross-site access not allowed
source: http://brassgoggles.co.uk/fonts/JaneAusten.woff
Source File: https://brassgoggles.co.uk/blog/wp-content/themes/brasscasing/style.css
Line: 0
Source Code:
@font-face {   font-family: "JaneAusten";   font-style: normal;   font-weight: normal;   src: local("JaneAusten"), url("http://brassgoggles.co.uk/fonts/JaneAusten.woff") format("woff"); }
Logged
S.Sprocket
Administrator
Zeppelin Captain
*
United States United States


Industria Proficiscor In!


« Reply #1 on: June 26, 2012, 02:29:19 am »

I'll flag this one for Proteus,

As a short term solution, perhaps a different browser?  I know this works great in Chrome.  If you don't like Chrome for all the advertising information you feed the beast, try Iron.  All the functionality, none of the tattle tale'ing to advertisers.

http://www.srware.net/en/software_srware_iron.php

Logged

"It's what a cove knows that counts, ain't it Sybil?  More than land or money, more than birth.  Information. Very flash." -Mick Radley

"Teaching boys to bake cakes? That's no way to maintain an industrial empire." --Fred Dibnah
HAC
Steam Theologian
Zeppelin Overlord
*******
Canada Canada


HAC_N800
« Reply #2 on: June 26, 2012, 05:54:49 pm »

Considering that FF 14 is still in beta, I'd not worry about it much until it becomes a release version.  Much can change between dev and final releases.
Logged

You never know what lonesome is , 'til you get to herdin' cows.
oldskoolpunk
Zeppelin Captain
*****
United States United States


WWW
« Reply #3 on: June 26, 2012, 10:50:12 pm »

Considering that FF 14 is still in beta, I'd not worry about it much until it becomes a release version.  Much can change between dev and final releases.
This won't change. I already tried reporting it as a Mozilla Bug 766827. Mozilla is moving towards "https everywhere possible", which is going to break some sites but will eventually result in better security.
Logged
Augustus Longeye
Daedric Lord of Biscuits
Board Moderator
Rogue Ætherlord
**
United Kingdom United Kingdom


WWW
« Reply #4 on: June 26, 2012, 11:08:57 pm »

Well I must admit it seems browser specific rather than the site, to my eyes, as I'm using chrome with enforced https on all sites, and I've never encountered a problem....
~Longeye~
Logged

Quote from: Sir Nikolas
I say you, chaps down there! Piss off, see? Haa ha! Love, Space Longeye <3
proteus
Devourer of Ugly Baked Goods
Administrator
Snr. Officer
*****
United States United States


brasstech
WWW
« Reply #5 on: August 01, 2012, 01:49:05 am »

A https style file on the site references a http font file.  Firefox 14 considers this a cross-site scripting error and won't load the font. 

Code:
Timestamp: 6/20/2012 7:36:52 PM
Error: downloadable font: download failed (font-family: "JaneAusten" style:normal weight:normal stretch:normal src index:1): bad URI or cross-site access not allowed
source: http://brassgoggles.co.uk/fonts/JaneAusten.woff
Source File: https://brassgoggles.co.uk/blog/wp-content/themes/brasscasing/style.css
Line: 0
Source Code:
@font-face {   font-family: "JaneAusten";   font-style: normal;   font-weight: normal;   src: local("JaneAusten"), url("http://brassgoggles.co.uk/fonts/JaneAusten.woff") format("woff"); }


The blog isn't intended to be used with HTTPS. There's no reason to, as no sensitive data is transmitted. That said, I will see if there is a simple fix.
Logged

--
"Politics and religion are just like software and hardware. They all suck, the documentation is provably incorrect, and all the vendors tell lies." — Andrew Dalgleish

How To Financially Support Brass Goggles — now with a subscription option!
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!
Page created in 0.089 seconds with 19 queries.