Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[App Audit] Recommendation: Embed fonts in app releases instead of pulling them from Google #1389

Open
HonzaR opened this issue Apr 23, 2024 · 0 comments
Labels
security_finding Security audit non-critical findings

Comments

@HonzaR
Copy link
Collaborator

HonzaR commented Apr 23, 2024

Is your feature request related to a problem? Please describe.

In Typography.kt, the app’s fonts are downloaded from Google over the web. This could be a privacy risk, as it potentially tells the Google font servers the IP addresses of the wallet’s users. It would be better build the fonts into the app itself.

Describe the solution you'd like

Alternatives you've considered

Additional context

@HonzaR HonzaR added the security_finding Security audit non-critical findings label Apr 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security_finding Security audit non-critical findings
Projects
None yet
Development

No branches or pull requests

1 participant