suppress the custom fonts visibility in network trace
we need to suppress the custom fonts which are woff files to be suppressed on network trace (available in developer tools)
to avoid the security Vulnerabilities in the application
| <server details>/PRServletCustom/PTWnWluN8_MrtlmgPfQ0waH62P7NKRmZ*/!@b30066dd28ee0ca417704de8190b3bc8!MarketingUI/webwb/webwb/pxfont-CustomFont-Italic.woff? | HTTPS | application/x-font-woff |
is there any way to do this?
Pegasystems Inc.
IN
Can you be more specific about what is the security issue and what you are trying to achieve? If you are saying you want to hide a request from browser should not be shown in the browser developer tools, I don't think that is possible. And its not just developer tools that can be used to look at network traffic. There could be other tools too like fiddler.
coforge.com
GB
i have verifeid it in Fiddler aswell.
in our application We have created a mashup which has a custom skin. Currently when loading the mashup application we can see that a number of OpenSans font files are severed to the browser. We want to suppress these files from been loaded to reduce the overall page size. We have created a custom skin with all the default mixins displayed and the typography seating to not refer to Open sans. We have then set our mashup to use this skin. One inspecting the css file generated by the skin rule will still see references to the Opensans font family.
How should we approach suppressing this completely ?
Pegasystems Inc.
IN
The default font family used in pega is OpenSans and @font-face rules for this family is included as part of pzBase-font css file which gets loaded with every skin.
Currently there is no simple way to not load opensans woff files.