advplyr / audiobookshelf-app

Mobile application for Audiobookshelf
https://audiobookshelf.org
GNU General Public License v3.0
1.29k stars 173 forks source link

[ios] in lockdown mode the UI becomes unusable #796

Open papamoose opened 1 year ago

papamoose commented 1 year ago

Steps to reproduce

  1. Settings > Privacy & Security > Lockdown Mode > Turn On Lockdown Mode
  2. Phone restarts then launch Audiobookshelf
  3. Note the UI text

Expected behaviour

Actual behaviour

Environment data

Audiobookshelf Version: 0.9.65-beta client V2.3.3 server

iOS Issue

iOS Version: 16.5.1 (c)

iPhone model: 13 Pro

Images

lockdown mode on

image image image

lockdown mode off

image

benonymity commented 12 months ago

I don't think this is something that can be easily fixed on the app's side, as Apple seems to be blocking all custom fonts and icon packs in webView, which is an intentional security choice that would be challenging to get around

benonymity commented 12 months ago

Probably related to a doubling down of a CORS policy

advplyr commented 12 months ago

The fonts are stored locally, no external requests are made for fonts

benonymity commented 12 months ago

Gotcha, wouldn't be CORS then. Looks like they're flat-out disabling any sort of SVG font:

Previewing files in web browsers is also restricted with Lockdown Mode. For instance, JPEG 2000 images and SVG fonts, which are exclusively supported by Safari, are disabled so websites can’t use these formats to target iOS users. PDF previewing for websites is also disabled, as multiple PDF-related exploits have been found in the past. link