From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id cPiKAkxwgWH66QAAgWs5BA (envelope-from ) for ; Tue, 02 Nov 2021 18:07:24 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id uJ+vOUtwgWFaCQAAbx9fmQ (envelope-from ) for ; Tue, 02 Nov 2021 17:07:23 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78D971F44C for ; Tue, 2 Nov 2021 18:07:23 +0100 (CET) Received: from localhost ([::1]:35784 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mhxFq-0002xk-6B for larch@yhetil.org; Tue, 02 Nov 2021 13:07:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45586) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mhxFW-0002vs-Js for bug-guix@gnu.org; Tue, 02 Nov 2021 13:07:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:54620) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mhxFW-0000aD-B0 for bug-guix@gnu.org; Tue, 02 Nov 2021 13:07:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mhxFW-00058l-2W for bug-guix@gnu.org; Tue, 02 Nov 2021 13:07:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#51478: icecat 91 can't display chinese font in many web page Resent-From: Mark H Weaver Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 02 Nov 2021 17:07:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 51478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Z572 <873216071@qq.com> Received: via spool by 51478-submit@debbugs.gnu.org id=B51478.163587280219729 (code B ref 51478); Tue, 02 Nov 2021 17:07:02 +0000 Received: (at 51478) by debbugs.gnu.org; 2 Nov 2021 17:06:42 +0000 Received: from localhost ([127.0.0.1]:37932 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhxF2-00057q-7c for submit@debbugs.gnu.org; Tue, 02 Nov 2021 13:06:42 -0400 Received: from world.peace.net ([64.112.178.59]:55762) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhxEz-00057V-9h for 51478@debbugs.gnu.org; Tue, 02 Nov 2021 13:06:30 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mhxEs-0000rl-2M; Tue, 02 Nov 2021 13:06:22 -0400 From: Mark H Weaver In-Reply-To: References: <87tugzvb58.fsf@netris.org> Date: Tue, 02 Nov 2021 13:04:20 -0400 Message-ID: <87o872mqts.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 51478@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1635872843; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=AKRfpyjL7pBaQiQOlXlK2kaGfbMaIbfBvh0ESqUQRgI=; b=PYMERWtfk1dYlnLWC3jd/CJPoJsaLpF0ovxjc9C0k1dy3bkowZWRCkmpBSdmLFrTy50biw Q53QcVOetAGAX1toLIkgyaNmuU8ZLyIXVY6CmQLnx/Yyo1+HO+9vTKd5R8WHzTL3N8nISb Zxcw7BuJ6b9lztNxO3ayvXwYrvgjOnWGCJ98v82FXW6m178nuCVAQiwcAk6M3AlODvTbPt JgPWEJVrLbUs58Nf+o5cQR0++IJ6okTrtmEJBJL8Klj/RYPskI0X5lZFFYsyVuSBL9RI2B XcFeSVsc5+GVqqe5TDfkTo31R3te2kZwSI9eX0A/PeSBmWFutu5b0At6CrXEFw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1635872843; a=rsa-sha256; cv=none; b=LJVJ9zBVaAHDCOhlG9TBptWLdTjDWUW3ObM1aKoja7KmdaHDBXqbG5NI4bS3mm19j+5vjb La/YCjsjmhX0UlNhAM/GTjy6qieK5n0LelVb+8dRFEZ076TO8UXzuUFE1HxtLS9BBM7p9X Zx/ZmsoeNwabcidJvzolp8fblXzJ3Q7SVnadPmSCjJ8LrBCVID6bqrnbMA3SKM57kCw1rJ s+8fPQaU6GV12nmihqNeuuzuxpMVMK5/zVprdnwOaqD71u2jIlF5we5m+hbidpd7r5km/n sGvi9Qmk01GVuM2p092u5rkieVHGpVGbBmqI9688D9U161WaLkapg5dqteyuAA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.42 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 78D971F44C X-Spam-Score: -2.42 X-Migadu-Scanner: scn0.migadu.com X-TUID: CwJUGFP8aVPk Hi, Z572 <873216071@qq.com> writes: > I add "/run/current-system/profile/share/fonts/" to > "security.sandbox.content.read_path_whitelist" fixed it for me. Thanks! One very important note: you should "reset" this customization after updating to IceCat 91.3.0, or else IceCat will stop working correctly after some future update of Guix. The reason is that the whitelist contains several other directories within /gnu/store/, and those directory will need to be updated whenever those components are updated in Guix. For example, when 'ffmpeg' is updated to a newer version, or one of its dependent libraries is updated, the directory name /gnu/store/=E2=80=A6-ffmpeg-4.4 will change; if you don't update the whitelist accordingly, video playback will stop working. In the IceCat 91.3.0 update that I pushed a few hours ago, I added "/run/current-system/profile/share/fonts/" to the default whitelist. So, I suggest that you update to IceCat 91.3.0 at your earliest opportunity, and then visit , navigate to the "security.sandbox.content.read_path_whitelist" setting, and click on its "reset" button (the one with an arrow pointing to the left), to erase the customization of that setting. Note that it is not enough to simply remove the directory that you added. You must click the reset button on that customization in order to allow it to be automatically updated in the future. * * * Going forward, I think that we should create a patch for IceCat analogous to the webkitgtk-bind-all-fonts.patch that Liliana wrote for WebKitGTK. I think that all of the directories that currently comprise the default value of "security.sandbox.content.read_path_whitelist" should instead be *implicitly* added to the whitelist, in *addition* to the contents of "security.sandbox.content.read_path_whitelist". That would enable users to customize that setting without having to manually keep the /gnu/store/=E2=80=A6/ entries updated. I'll keep this bug open for now, pending a more proper fix. Thanks, Mark --=20 Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about .