<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0);">Hi Vlad,</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">Yes, I was wondering about that as well. I didn’t think that mixing mention of external references and foreignObject in the same subsection would look too odd. However, the title of the subsection should reflect that.</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">The subsection title could read: “Security considerations and other glyph rendering restrictions” instead of just “Security”. And it should be a sub-section of the “Glyph rendering” section, and not a parallel section as in
the draft. This is because security is achieved by restricting how the glyph is rendered. Also, the contents of the UA style sheet are related to the restrictions for security (and for text elements/foreignObject).</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div>I’m also fine if you prefer having a second sub-section after “Security considerations” that reads “Other rendering restrictions” with content: “R<span style="color: rgb(0, 0, 0);">endering of the glyphs must ignore any SVG text elements and foreignObjects
encountered.</span>”</div>
<div><br>
</div>
<div>So the section/subsection hierarchy should be:</div>
<div><br>
</div>
<div>Glyph rendering</div>
<div>- Security considerations and other glyph rendering restrictions</div>
<div><br>
</div>
<div>Or</div>
<div><br>
</div>
<div>Glyph rendering</div>
<div style="color: rgb(0, 0, 0);">- Security considerations</div>
<div style="color: rgb(0, 0, 0);">- Other rendering restrictions</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">Thanks,</div>
<div style="color: rgb(0, 0, 0);">Sairus</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Levantovsky>, Vladimir Levantovsky <<a href="mailto:Vladimir.Levantovsky@monotype.com">Vladimir.Levantovsky@monotype.com</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, March 11, 2014 at 12:46 PM<br>
<span style="font-weight:bold">To: </span>Sairus Patel <<a href="mailto:sppatel@adobe.com">sppatel@adobe.com</a>>, Jonathan Kew <<a href="mailto:jfkthame@gmail.com">jfkthame@gmail.com</a>>, "<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>"
<<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>><br>
<span style="font-weight:bold">Subject: </span>RE: [mpeg-OTspec] comments re SVG table in the OFF draft<br>
</div>
<div><br>
</div>
<div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:10.0pt;
margin-left:0in;
line-height:115%;
font-size:10.0pt;
font-family:"Verdana","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.ygrp-photo-title, li.ygrp-photo-title, div.ygrp-photo-title
{mso-style-name:ygrp-photo-title;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
text-align:center;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
span.cat
{mso-style-name:cat;}
span.ct
{mso-style-name:ct;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1430354216;
mso-list-template-ids:-1507720604;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Hi Sairus,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">I am a bit hesitant to mix the security consideration and rendering restrictions in the same paragraph. While the end result we
want to achieve may seem to be the same – i.e., we don’t want to see something happen – the reasons for not allowing something to happen are quite different and don’t mix well. I’d rather keep rendering limitations away from security considerations and vice
versa. (This is my personal opinion only, I am very much open to other suggestions from the group.)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Vlad<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; line-height: 115%; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b><span style="font-family: Tahoma, sans-serif;">From:</span></b><span style="font-family: Tahoma, sans-serif;">
<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a> [<a href="mailto:mpeg-OTspec@yahoogroups.com">mailto:mpeg-OTspec@yahoogroups.com</a>]
<b>On Behalf Of </b>Sairus Patel<br>
<b>Sent:</b> Tuesday, March 11, 2014 3:39 PM<br>
<b>To:</b> Jonathan Kew; Levantovsky, Vladimir; OTspec <<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>><br>
<b>Subject:</b> Re: [mpeg-OTspec] comments re SVG table in the OFF draft<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><br>
<br>
<br>
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">Thanks, Vlad and Jonathan, for moving these changes forward (these changes were brought up after the final report of the W3C was published).<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">The “Glyph rendering” section’s “Security” sub-section already describes the current restrictions on the glyphs:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">>>><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span lang="EN" style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">It is required that all rendering of SVG glyphs be done in the “secure animated mode” or “secure static mode” specified in the W3C document
</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:black"><a href="https://svgwg.org/specs/integration/"><span lang="EN">SVG Integration</span></a></span><span lang="EN" style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">.
These modes permit </span><span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">no script execution, external references, interactivity, or link traversal</span><span lang="EN" style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">.</span><span lang="EN" style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"></span><span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span lang="EN" style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><<<</span><span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">So that seems the right place to indicate these additional restrictions.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">I propose that the following be added to the end of that sub-section:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">>>><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">In addition, rendering of the glyphs must ignore any SVG text elements and foreignObjects encountered.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><<<<o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">That should suffice for indicating that text elements and foreignObjects are not allowed, and also addresses Jonathan’s point about what the impl should do if it encounters
them.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;">Sairus<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: black;"><o:p> </o:p></span></p>
</div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: black;">From:
</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: black;">Jonathan Kew <<a href="mailto:jfkthame@gmail.com">jfkthame@gmail.com</a>><br>
<b>Date: </b>Tuesday, March 11, 2014 at 9:05 AM<br>
<b>To: </b>Vladimir Levantovsky <<a href="mailto:Vladimir.Levantovsky@monotype.com">Vladimir.Levantovsky@monotype.com</a>>, "<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>" <<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>><br>
<b>Subject: </b>Re: [mpeg-OTspec] comments re SVG table in the OFF draft<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: black;"><o:p> </o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;background:white">
<span style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: black;">
<o:p></o:p></span></p>
<div id="ygrp-text">
<p style="margin-bottom:12.0pt;background:white"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: black;">On 11/3/14 15:53, Levantovsky, Vladimir wrote:<br>
> Thank you Jonathan,<br>
><br>
> What you're proposing makes perfect sense but I also wonder if, in<br>
> light of the changes proposed by Cameron for UA style sheet we should<br>
> also extend the language of your proposed second sentence to say that<br>
> "The use of SVG text elements _and/or SVG foreign objects_ within<br>
> these glyph descriptions is prohibited."<br>
<br>
Sounds good to me. We should certainly mention the foreignObject <br>
prohibition somewhere, and this seems a logical place to include it.<br>
<br>
JK<br>
<br>
><br>
> Best regards, Vladimir<br>
><br>
><br>
>> -----Original Message----- From: <a href="mailto:mpeg-OTspec@yahoogroups.com">
mpeg-OTspec@yahoogroups.com</a><br>
>> [<a href="mailto:mpeg-OTspec@yahoogroups.com">mailto:mpeg-OTspec@yahoogroups.com</a>] On Behalf Of Jonathan Kew<br>
>> Sent: Tuesday, March 11, 2014 11:37 AM To: OTspec<br>
>> <<a href="mailto:mpeg-OTspec@yahoogroups.com">mpeg-OTspec@yahoogroups.com</a>> Subject: [mpeg-OTspec] comments re<br>
>> SVG table in the OFF draft<br>
>><br>
>> A few comments on the current 3rd ed. working draft:<br>
>><br>
>> - - - - -<br>
>><br>
>> First, the opening sentence in section "5.5.1 SVG - The SVG<br>
>> (Scalable Vector Graphics) table" seems problematic to me:<br>
>><br>
>> <quote> This table contains SVG [16] descriptions for some or all<br>
>> of the glyphs in the font, the use of SVG text elements for outline<br>
>> fill is prohibited. </quote><br>
>><br>
>> This would read much better if split into two sentences, not joined<br>
>> by a comma. And second, shouldn't the use of SVG text elements be<br>
>> prohibited for -any- purpose within the glyphs (not only for<br>
>> outline fill)? If we want to avoid glyph descriptions referring to<br>
>> external fonts, we can't allow SVG text elements to be stroked or<br>
>> used as clipping paths, for example.<br>
>><br>
>> So I suggest changing this to something like:<br>
>><br>
>> <proposed> This table contains SVG [16] descriptions for some or<br>
>> all of the glyphs in the font. The use of SVG text elements within<br>
>> these glyph descriptions is prohibited. </proposed><br>
>><br>
>> - - - - -<br>
>><br>
>> Further, we should specify what happens if an SVG text element is<br>
>> found (despite being prohibited): is that element ignored, but the<br>
>> remainder of the glyph rendered normally, or do we consider the<br>
>> entire glyph description invalid, and ignore it, falling back to a<br>
>> TrueType or CFF glyph?<br>
>><br>
>> Offhand, I'm inclined to favor the former: require the renderer to<br>
>> ignore the SVG text element(s), but proceed to do its best to<br>
>> render any other content. So I'd suggest an additional sentence<br>
>> such as:<br>
>><br>
>> <proposed> If any SVG text element is encountered within a glyph<br>
>> description, it MUST be ignored by the renderer. </proposed><br>
>><br>
>> - - - - -<br>
>><br>
>> Finally, forwarding a comment from Cameron McCormack regarding the<br>
>> description of "Glyph Rendering":<br>
>><br>
>> <forwarded> I don't think that added rule in the UA style sheet,<br>
>><br>
>> :root { font-size: 0 !important; }<br>
>><br>
>> is sufficient, since font-size can be specified on an element in<br>
>> the document. The importance of the rule doesn't inherit.<br>
>><br>
>> Instead, I think this would work:<br>
>><br>
>> @namespace svg url(<a href="http://www.w3.org/2000/svg">http://www.w3.org/2000/svg</a>);<br>
>><br>
>> svg|text, svg|foreignObject { display: none !important; }<br>
>><br>
>> Using |display: none| seems like a clearer description of what's<br>
>> going on, and should have the same effect as |font-size: 0|.<br>
>> </forwarded><br>
>><br>
>> This seems like a good change we should make to the draft.<br>
>><br>
>><br>
>> JK<br>
>><br>
>><br>
>> ------------------------------------<o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: black;"><br>
<br>
<br>
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: white;"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</span>
</body>
</html>