change fontset 'icons' to html entities to improve security compliance

2015-09-01T14:42:21
ID ATLASSIAN:CONFCLOUD-38988
Type atlassian
Reporter dooi
Modified 2017-04-02T08:47:20

Description

{panel:bgColor=#e7f4fa} NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? [See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-38988]. {panel}

It seems that the icons in Confluence are currently rendered using fontset. This can be an issue for organization especially banks that have strict security constraint (fontset cannot be downloaded) as a result this will not render on customer instance.

I would recommend that we change the current method of icons being rendered using fontset being changed to HTML entities instead.

There is also a security issue which have been reported by Microsoft recently the link can be found below : https://support.microsoft.com/en-gb/kb/3079904

You can see an example of a customer instance not rendering the fontset icons as per the screenshot attached below : !fontset not rendering.jpg|thumbnail!