From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 4FiBE8vvgWFUnwAAgWs5BA (envelope-from ) for ; Wed, 03 Nov 2021 03:11:23 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id oEQvD8vvgWEScAAA1q6Kng (envelope-from ) for ; Wed, 03 Nov 2021 02:11:23 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id F34572C3F4 for ; Wed, 3 Nov 2021 03:11:22 +0100 (CET) Received: from localhost ([::1]:52460 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mi5kH-0003NR-Ua for larch@yhetil.org; Tue, 02 Nov 2021 22:11:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:54676) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mi5jy-0003NH-Vm for bug-guix@gnu.org; Tue, 02 Nov 2021 22:11:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:55159) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mi5jy-00020v-Nn for bug-guix@gnu.org; Tue, 02 Nov 2021 22:11:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mi5jy-0002fH-Ab for bug-guix@gnu.org; Tue, 02 Nov 2021 22:11:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#51478: icecat 91 can't display chinese font in many web page Resent-From: Z572 <873216071@qq.com> Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 03 Nov 2021 02:11:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 51478 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Mark H Weaver Cc: 51478@debbugs.gnu.org Received: via spool by 51478-submit@debbugs.gnu.org id=B51478.163590545710231 (code B ref 51478); Wed, 03 Nov 2021 02:11:02 +0000 Received: (at 51478) by debbugs.gnu.org; 3 Nov 2021 02:10:57 +0000 Received: from localhost ([127.0.0.1]:38472 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mi5js-0002ex-9q for submit@debbugs.gnu.org; Tue, 02 Nov 2021 22:10:56 -0400 Received: from out203-205-251-27.mail.qq.com ([203.205.251.27]:56295) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <873216071@qq.com>) id 1mi5jl-0002eZ-Ie for 51478@debbugs.gnu.org; Tue, 02 Nov 2021 22:10:54 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1635905439; bh=pZFgFRYzWY6vRpY1TlDmh0RdLNQ+FWnP7GTs1NbpEtk=; h=References:From:To:Cc:Subject:Date:In-reply-to; b=W6ed4k2yVsCdPqDqsoPo6i09webOFN3DEEWVyH2xv36V3muiS1txLOalKE22VRdUM 6+9HQM8knZfxEC9ng6UWBkwGLOe5B/0Drh4WpKVSub7vs4ktofcgJWHQO6AwA8XttD tswBLsWbT93OOjC3dJ+6sFQEwUB1Gk7Uq+eIZJ+U= Received: from asus ([2409:8928:1202:1b8f:c368:3cf6:fda2:3318]) by newxmesmtplogicsvrsza8.qq.com (NewEsmtp) with SMTP id 2A4A24E6; Wed, 03 Nov 2021 10:10:36 +0800 X-QQ-mid: xmsmtpt1635905436tlxanamej Message-ID: X-QQ-XMAILINFO: ObFHHlrAm440ssz5bShn8jFhmeY7KzT+4uT7ZxwNajyIsKGWnc+N47l2u2pobi l7G/d5h5nm+s7r3ZTt5QaVMJMRYRCb1DBwC5l3kvpq0OkhFKEVygQzQkmtjsYGDXPSZjsVHsflpg tnowNVPLXPegaFwaIHeiUZmqYWfBuaTGVPNrE6QySz7c9zm5PbKF6kEDTxXtNa64Y23IdSfx+kw+ CIrul0w0oWz7EfVGoygFkQGiUwN2nwNbm6yLLxPbTzcefDQoZK6B267P5W6t4NdmE2Qv2DF344jS bEVPy6GCirUE47K7QyTtbJtx4vJd1ifTdDi7/Qjv73VzyUSgybBD82tBnLx4yqhYgL3Xvbw/w7Ov DqELzlkmq8DWow6BlI5pCdtaaxf0pEuL2QAUj/uSV0ltGfJ+H5xXsXHi5MGIZw2G4F8PT4lkZH0t Ihn2+L/e12H+VI/lKS9b5k75KjeLI57AcVS6xV4xKxubB+V8/i592jL1m+GRQcQbJr+528v8DZDn pZgw/1iyqLoM+d9SPkU4lfPcLrSuZMcM8qR3wU2Gm3jz8C++y3ZfmQiBuZo0u8lRS3F7NPofWern vCRjdcm7H0NwiNoHjnHGwE2OhfeBB5sjUORNMXVe+/LhRwebo4n/aLXGCZpR2+YRWlw62Tjj9EgX LenswOwAAcw9KlDy26FsWiaGJ18Q0wOSx9d27kCLuMm1WdwA7h1E0BvOJ0WFC9vq2gNXROnmprAo V/2/Pcyy6cfRXVdKC0k8g2OVqfz23PojmOiEJx8MAivdYDzkXQMYg91YBHZyPP3MRDaELK1u58P8 5YM6HN7cb1uIHICsqKwy93TNIRoB2+xsssNqmodHLrFPJM0ppIxY+h References: <87tugzvb58.fsf@netris.org> <87o872mqts.fsf@netris.org> User-agent: mu4e 1.6.6; emacs 28.0.50 Date: Wed, 03 Nov 2021 09:39:38 +0800 In-reply-to: <87o872mqts.fsf@netris.org> X-OQ-MSGID: <87wnlqyoo3.fsf@qq.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" Reply-to: Z572 <873216071@qq.com> From: Z572 via Bug reports for GNU Guix X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1635905483; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=pZFgFRYzWY6vRpY1TlDmh0RdLNQ+FWnP7GTs1NbpEtk=; b=fZbQ0JF7L6FDbEbaUn4XQGhCGuXtex61dbzOgYD3cU9W2XZqmP+YL+VjIjUgSy6UX1cuCp XE4awS2kq10ClDmy6jJpwrM2b/gHKumgHCH002ouPT3SVc5/+blVnOP571RIWt12OLX4xr TLHeuFUAR/tt7CrPfsVYyYLiEY9sSgE11+rpzNbHMdr6kuurocXl76yHtN7E4I4XZeM0n2 7Ujv/iIJ+H0JdAbDU+jgkfV9v0wWEyDXz+lyuFSq6ZvmwxVYX33qdjg+5BRcjm6tYAZjhq TWoSLURwZXn/izyLZWQXHDIuBJAq0LUVJjtaWMu53hEoJQ1M/55gvs+ciqRm4A== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1635905483; a=rsa-sha256; cv=none; b=rShN16FRwictIqwe7kh98YtPB7chsKFGGutWmksVPF9H1cH+Fv3IEQsr6kV29s5Eceg3WV OO7rnXZq0grSIlfAXc1ENki+ex/ejQEImhPgW92lA/B+p7j5Z2vwQTgqgCRQaSPmHAagjp Aw5+PUZRG+Twts2JKSVk+0kzLAwJ5zMkWypC54YdQAkXu/RUEi6YUj0Ks09545zwYzT/n0 HjJYOLNqiQIyiGUpgZci+xr6lJ1u4CroUq73LhCdxIvgbLheT1LlGjOSNWuv6hKQqxmbLz Qt19cnobutLxaAqaZdoJtQWKgzQ6aDk7lR0RDxXLpJcNzefFBVqFiNwi7U/pGg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=qq.com header.s=s201512 header.b=W6ed4k2y; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.92 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=qq.com header.s=s201512 header.b=W6ed4k2y; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: F34572C3F4 X-Spam-Score: -2.92 X-Migadu-Scanner: scn0.migadu.com X-TUID: 7BciKG2I/PWD thanks for reminding :) . Mark H Weaver writes: > Hi, > > Z572 <873216071@qq.com> writes: >> I add "/run/current-system/profile/share/fonts/" to >> "security.sandbox.content.read_path_whitelist" fixed it for me. > > Thanks! One very important note: you should "reset" this customization > after updating to IceCat 91.3.0, or else IceCat will stop working > correctly after some future update of Guix. The reason is that the > whitelist contains several other directories within /gnu/store/, and > those directory will need to be updated whenever those components are > updated in Guix. For example, when 'ffmpeg' is updated to a newer > version, or one of its dependent libraries is updated, the directory > name /gnu/store/=E2=80=A6-ffmpeg-4.4 will change; if you don't update the > whitelist accordingly, video playback will stop working. > > In the IceCat 91.3.0 update that I pushed a few hours ago, I added > "/run/current-system/profile/share/fonts/" to the default whitelist. > > So, I suggest that you update to IceCat 91.3.0 at your earliest > opportunity, and then visit , navigate to the > "security.sandbox.content.read_path_whitelist" setting, and click on its > "reset" button (the one with an arrow pointing to the left), to erase > the customization of that setting. > > Note that it is not enough to simply remove the directory that you > added. You must click the reset button on that customization in order > to allow it to be automatically updated in the future. > > * * * > > Going forward, I think that we should create a patch for IceCat > analogous to the webkitgtk-bind-all-fonts.patch that Liliana wrote for > WebKitGTK. I think that all of the directories that currently comprise > the default value of "security.sandbox.content.read_path_whitelist" > should instead be *implicitly* added to the whitelist, in *addition* to > the contents of "security.sandbox.content.read_path_whitelist". That > would enable users to customize that setting without having to manually > keep the /gnu/store/=E2=80=A6/ entries updated. > > I'll keep this bug open for now, pending a more proper fix. > > Thanks, > Mark --=20 over