Re: [ft-devel] GSoC 2017

[k kushal]

The FreeType website connection is not fully secured because there are unsafe scripts.

These are the warnings.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Serif:r,i,b,bi'. This request has been blocked; the content must be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Sans:r,b'. This request has been blocked; the content must be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Sans+Mono'. This request has been blocked; the content must be served over HTTPS.

www.freetype.org/:720 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure image 'http://api.flattr.com/button/flattr-badge-large.png'. This content should also be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure image 'http://button.flattr.com/flattr-badge-large.png'. This content should also be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Serif:r,i,b,bi'. This request has been blocked; the content must be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Sans:r,b'. This request has been blocked; the content must be served over HTTPS.

www.freetype.org/:1 Mixed Content: The page at 'https://www.freetype.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Droid+Sans+Mono'. This request has been blocked; the content must be served over HTTPS.

If the unsafe scripts are loaded, the connection becomes insecure.

This is happening because in the freetype2.css file, for example,one of the requested URL is

http://fonts.googleapis.com/css?family=Droid+Serif:r,i,b,bi

Similarly there are more.

This makes the browser to load the page in Serif font rather than the desired font i.e Droid Serif Font.  :O

Problem: Wrong font displayed on a font library website ! 

Solution: Replace all the http:// to https:// in freetype2.css

Result: Secure Connection and Correct font restored. :P