[MPEG-OTSPEC] [EXTERNAL] questions on OT-SVG in Chrome, MS Edge and Firefox

[Peter Constable]

> Guess OT-SVG support was broken when MS Edge moved to a Chromium-based backend in April 2021.

That’s correct.


Peter

From: Hin-Tak Leung <htl10 at users.sourceforge.net>
Sent: Monday, February 12, 2024 3:07 PM
To: mpeg-otspec at lists.aau.at; Jonathan Kew <jfkthame at gmail.com>; Peter Constable <pconstable at microsoft.com>
Cc: suzuki toshiya <mpsuzuki at hiroshima-u.ac.jp>
Subject: [EXTERNAL] questions on OT-SVG in Chrome, MS Edge and Firefox

Hi,

I have continued to keep the blink/skia patches [1] up to date to current Chromium. And continue to test them [2] with QT WebEngine, which is a slimmed-down Chromium code variant up to about 3 months behind in latest Chromium development. Am trying to get the QT folks to take the patches [3].

Since some claimed that MS Edge supports OT-SVG back in 2017, and MS Edge has been available for Linux for a while, I gave it a try, and it is a NO. Guess OT-SVG support was broken when MS Edge moved to a Chromium-based backend in April 2021.

Anyway, here is a question for Peter and possibly also other Microsoft folks:

- I have no idea how much current MS Edge on windows differs from Chrome on windows, but would you pass the URL for the patches to the relevant people and let them see what they see fit to adapt please? Thanks. Feedbacks and corrections/modifications can go to [1]'s issues, etc or directly/privately to me if needed.

And here is a question for Jonathan, and possibly other Firefox folks:

- logically my chrome patches are in 3 parts, a one-liner switching OT-SVG support on in Skia, tell OTS to let such fonts pass-through as a usable font format, and get Blink to use freetype for non-OS-native font formats similar to sbix for windows etc. The 2nd part is somewhat common to Firefox - how does firefox deal with OT-SVG web-font sanitizing-wise? Does its copy of OTS (AFAIK) let them through and just hope the SVG processing is robust enough, or do some XML/etc validation on the way?

Would like to hear what Safari/Apple folks or webkitgtk folks (both of them supoprts OT-SVG, the latter I tested myself with webkitgtk-sharp) who like to comment on the sanitizing/security aspect of OT-SVG web fonts too.

Hin-Tak


[1] https://github.com/HinTak/chromium-mod-CI
[2] https://github.com/HinTak/Qt6WE-OT-SVG
[3] https://bugreports.qt.io/browse/QTBUG-120543
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.aau.at/pipermail/mpeg-otspec/attachments/20240213/ec81a4fe/attachment.htm>