InformAction Forums

How to reproduce:

1. In NoScript options, make sure the Scripts Globally Allowed checkbox is unchecked. Check the Forbid @font-face checkbox on the Embeddings tab.

2. Visit typekit.com, e. g. the page http://typekit.com/fonts/myriad-pro. Make sure the site is not whitelisted in NoScript.

3. In the NoScript menu, choose Blocked Objects -> Temporarily allow Font@. Press OK to confirm.

4. Reload the page if necessary.

The fonts are still not loaded, and all font samples use default fonts. I expected the fonts to load once I told NoScript to allow them on this site.

You can easily tell if the fonts are loaded because Myriad Pro is a recognizable sans-serif font, and the default browser font usually has serifs. To see what the page should look like, uncheck the Forbid @font-face checkbox and reload the page if necessary.

If this is not a bug but a feature, please explain how to selectively allow fonts from typekit.com without allowing to load fonts from other sites.

Software versions used:
NoScript 2.0.2.3 (AMO version)
Firefox 3.6.8
Ubuntu 10.04

That site use data: URI to represent fonts, rather than external resources.
Usually NoScript doesn't allow data: URIs unless the parent page is allowed.
This means that in this case, in order to see the font, you need to allow the site.
Unfortunately NoScript's UI doesn't help much in understanding the issue, since it shows the Blocked Objects menu and an "Allow FONT@" command which doesn't do anything.
I'm working at a solution (either not displaying the command or, better but more complicated, proposing the page origin site, rather than the meaningless "FONT@", as the "key" to unblock the font in question).

Fixed in latest development build, thanks.

Cool. Thank you.