| OpenType Sanitizer | |
| ================== | |
| The OpenType Sanitizer (OTS) parses and serializes OpenType files (OTF, TTF) | |
| and WOFF and WOFF2 font files, validating them and sanitizing them as it goes. | |
| The C library is integrated into Chromium and Firefox, and also simple | |
| command line tools to check files offline in a Terminal. | |
| The CSS [font-face property][1] is great for web typography. Having to use images | |
| in order to get the correct typeface is a great sadness; one should be able to | |
| use vectors. | |
| However, on many platforms the system-level TrueType font renderers have never | |
| been part of the attack surface before, and putting them on the front line is | |
| a scary proposition... Especially on platforms like Windows, where it's a | |
| closed-source blob running with high privilege. | |
| Installation | |
| ------------ | |
| See [INSTALL][2] | |
| Usage | |
| ----- | |
| See [docs][3] | |
| * * * | |
| Thanks to Alex Russell for the original idea. | |
| [1]: http://www.w3.org/TR/CSS2/fonts.html#font-descriptions | |
| [2]: https://github.com/khaledhosny/ots/tree/master/INSTALL | |
| [3]: https://github.com/khaledhosny/ots/tree/master/docs/ |