zerocrates
Joined 12 years ago
Joined 12 years ago
Adobe's Source (the basis for this one), Google's Roboto and Google Sans, the very common Inter, Lato and Open Sans, coding/monospace fonts like Iosevka, JetBrains Mono... chances are that a free font you're aware of uses the OFL, particularly if it's even vaguely recent.
A client-side check's not so unreasonable for that kind of thing.
Of course then you still want the list to be accurate and/or actually have some working support flow that results in an overzealous filter getting fixed. The code suggests that they do or did have a process at some point: the list of specific domains is an override that allows domains that would otherwise match one of the regexes and get blocked.
An extra blank form on the page and the form attribute on the button can work around that, and at that point the argument would basically be: this is super clunky.
But seriously, safe to assume they meant to say calls and just accidentally wrote the wrong one.
Similar reason (though with the opposite effect) as how a cert can be fine for browsers but fail for curl when they don't send an intermediate: the "vanilla"/library/command-line stuff is just checking for a path to a trusted cert and not doing the CRL or AIA stuff a browser does.