user.js

commit 907e0aaa24154cf94e8ea9734e9d1110281c5a56
parent 5e0f37c9259cf05ab3e479c7872d741e6d01ee83
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date:   Tue, 20 Jun 2017 03:25:31 +1200

1408: graphite: update & add ref
Diffstat:
M
user.js
 | 
3
++-

1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/user.js b/user.js
@@ -766,7 +766,8 @@ user_pref("layout.css.font-loading-api.enabled", false);
  * [1] http://kb.mozillazine.org/Font.blacklist.underline_offset ***/
 user_pref("font.blacklist.underline_offset", "");
 /* 1408: disable graphite which FF49 turned back on by default
- * In the past it had security issues - need citation ***/
+ * In the past it had security issues. Update: This continues to be the case, see [1]
+ * [1] https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/#CVE-2017-7778 ***/
 user_pref("gfx.font_rendering.graphite.enabled", false);
 /* 1409: limit system font exposure to a whitelist (FF52+) [SETUP]
  * If the whitelist is empty, then whitelisting is considered disabled and all fonts are allowed.