I have read a lot lately about fonts being malicious, and as a website can just download its own custom font onto your machine so that it can use it, it could exploit something with this and do something bad.
So I was wondering if in Firefox there is any way to make it so that websites aren't allowed to download their own fonts for use, but instead websites are only allowed to demand to use fonts already installed on the machine, and so that websites that want to download their own font are just given the default fonts?
Because I could just get all sites to use the same default fonts, but I find that that just looks ugly, one font can look lovely on one website, but horrible on another, so I would like to give them some ability to choose, but just restricted choosing for security reasons.
OS Information:
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 15.04
Release: 15.04
Codename: vivid
Flavour: GNOME
GNOME Version: 3.16
Package Information:
firefox:
Installed: 40.0.3+build1-0ubuntu0.15.04.1
Candidate: 40.0.3+build1-0ubuntu0.15.04.1
Version table:
*** 40.0.3+build1-0ubuntu0.15.04.1 0
500 http://archive.ubuntu.com/ubuntu/ vivid-updates/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu/ vivid-security/main amd64 Packages
100 /var/lib/dpkg/status
37.0+build2-0ubuntu1 0
500 http://archive.ubuntu.com/ubuntu/ vivid/main amd64 Packages