change fontset 'icons' to html entities to improve security compliance

Type atlassian
Reporter dooi
Modified 2017-04-02T08:47:20


{panel:bgColor=#e7f4fa} NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? [See the corresponding suggestion|]. {panel}

It seems that the icons in Confluence are currently rendered using fontset. This can be an issue for organization especially banks that have strict security constraint (fontset cannot be downloaded) as a result this will not render on customer instance.

I would recommend that we change the current method of icons being rendered using fontset being changed to HTML entities instead.

There is also a security issue which have been reported by Microsoft recently the link can be found below :

You can see an example of a customer instance not rendering the fontset icons as per the screenshot attached below : !fontset not rendering.jpg|thumbnail!