{"action":"closed","issue":{"url":"https://api.github.com/repos/WGBH/stock-sales-2/issues/35","labels_url":"https://api.github.com/repos/WGBH/stock-sales-2/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/WGBH/stock-sales-2/issues/35/comments","events_url":"https://api.github.com/repos/WGBH/stock-sales-2/issues/35/events","html_url":"https://github.com/WGBH/stock-sales-2/issues/35","id":107001792,"number":35,"title":"Make sure fonts work","user":{"login":"mccalluc","id":730388,"avatar_url":"https://avatars.githubusercontent.com/u/730388?v=3","gravatar_id":"","url":"https://api.github.com/users/mccalluc","html_url":"https://github.com/mccalluc","followers_url":"https://api.github.com/users/mccalluc/followers","following_url":"https://api.github.com/users/mccalluc/following{/other_user}","gists_url":"https://api.github.com/users/mccalluc/gists{/gist_id}","starred_url":"https://api.github.com/users/mccalluc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mccalluc/subscriptions","organizations_url":"https://api.github.com/users/mccalluc/orgs","repos_url":"https://api.github.com/users/mccalluc/repos","events_url":"https://api.github.com/users/mccalluc/events{/privacy}","received_events_url":"https://api.github.com/users/mccalluc/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-09-17T14:47:51Z","updated_at":"2015-09-22T18:15:55Z","closed_at":"2015-09-22T18:15:55Z","body":"Two things:\r\n- Do you just reference http://www.wgbh.org/css/fonts.css in our html, or is it more complicated than that?\r\n- Do we have the appropriate licence?\r\n\r\nOn the second point: I was expecting a setup where referer headers are checked, and content is only sent if it matches a white list... but that doesn't seem to be the case.\r\n\r\n```\r\n$ curl -s 'http://www.wgbh.org/css/fonts.css' | less\r\n/*\r\n        Copyright (C) 2011-2014 Hoefler & Co.\r\n        ....\r\n*/\r\n@font-face{ font-family: \"Whitney SSm A\"; src: url(data:application/x-font-woff;base64,d09GRk9UVE8AADYNAA0AAAAAXYgAAQAAAAA...\r\n```\r\n\r\nFonts are being served with or without the referer -- Without seeing an access denied, I'm not confident that we actually have been granted reliable access."}}