RestyaPlatform / board

Trello like kanban board. Based on Restya platform.
http://restya.com/board/
Open Software License 3.0
2.03k stars 385 forks source link

Resolve fonts.googleapis.com at build-time, not at runtime #4395

Open Ezwen opened 2 years ago

Ezwen commented 2 years ago

Expected Behavior

When running RestyaBoard in a browser, I would expect it to be self-contained, and to not rely any resources (eg. fonts, JS libraries, etc) provided by third-party servers/companies. The reason is that, when downloaded from third parties (eg. Google), such resources are used as a mean for tracking their users.

Current Behavior

Currently, RestyaBoard has a hard-coded dependency to fonts.googleapis.com/css?family=Open+Sans, which means RestyaBoard running in a browser will always try to reach servers from Google. This means Google can track RestyaBoard users, to some extent.

See this line from index.html https://github.com/RestyaPlatform/board/blob/9c34b6b59ee2665e78a54c5f3a887beba6a19c4b/client/index.html#L13

Screenshots (if appropriate):

Capture d’écran de 2022-03-18 15-22-10

Possible Solution

Steps to Reproduce (for bugs)

  1. Download the provided docker-compose file.
  2. Change the volume declarations as required for the local bindings.
  3. Run docker-compose up
  4. Open Firefox (without addons)
  5. Open the developer tab (ctrl+shift+c), reach the network section
  6. Open http://localhost:1234

Context

Your Environment