521167 - @font-face with url(../xyz) type do not work

Status: RESOLVED INVALID

(Core :: Graphics, defect)

Description

[Vincent Hardy]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

When the @font-face source url refers to a directory which is relative to the parent of the current directory, the font-file is not loaded.

Reproducible: Always

Steps to Reproduce:
Preparation: 
1. Expand the attached zip file.
2. Download the Jinky font from Font Squirel: http://www.fontsquirrel.com/fonts/Jinky and add the ttf file to res/fonts/jinky
3. Load the file in the svg-src-dir directory (test-text-on-path.svg)
4. Note that the jinky font is not loaded.



Expected Results:  
The text in the SVG file should use the Jinky font. Note that if the fonts were under a subdirectory, then the font-face operates properly.

Comment 1

[Vincent Hardy]

Attachment: Contains the files and directory structure for exercising the bug

Comment 2

[Vincent Hardy]

Attachment: Contains the file and directory structure to reproduce the bug

Comment 3

[philippe (part-time)]

How did you test this ? With the files on a webserver, accessing them over HTTP? Or by opening the file from your local file system (File > Open form the browser's menu, it shows as file:/// in the location bar)?

This works correctly over HTTP. It does not work from the local file system and shouldn't. In that case, for security & privacy reasons, the browser can only access dependent files in downward folder. I think this is INVALID.

Comment 4

[Vincent Hardy]

Yes, this is with the file:// url, I should have made that clear in the bug description.

Comment 5

[Masatoshi Kimura [:emk]]

-> INVALID per comment #5 & #6.
You can, however, weaken security via about:config.
http://kb.mozillazine.org/Security.fileuri.strict_origin_policy

Comment 6

[Vincent Hardy]

ok. Thanks for the pointer to the fileuri security setting, I appreciate it.

Comment 7

[Dave Miller [:justdave]]

The content of attachment 405203 [details] has been deleted by
    Dave Miller [:justdave] <[e-mail]>
who provided the following reason:

Submitter requested deletion due to accidental inclusion of proprietary data

The token used to delete this attachment was generated at 2009-10-14 11:54:59 PDT.