[webkit-reviews] review denied: [Bug 31106] [Chromium] handle web fonts in a secure manner : [Attachment 42611] transcode_webfonts_by_ots_v5

[bugzilla-daemon at webkit.org]

Dave Hyatt <hyatt at apple.com> has denied Yusuke Sato <yusukes at chromium.org>'s
request for review:
Bug 31106: [Chromium] handle web fonts in a secure manner
https://bugs.webkit.org/show_bug.cgi?id=31106

Attachment 42611: transcode_webfonts_by_ots_v5
https://bugs.webkit.org/attachment.cgi?id=42611&action=review

------- Additional Comments from Dave Hyatt <hyatt at apple.com>
Minor quibble, but you should use American English spelling rather than British
English spelling, e.g., we don't call Colors Colours. :)

This means changing sanitise to sanitize, and OpenTypeSanitiser to
OpenTypeSanitizer.

Can you explain more the motivation of this patch?  Have you run into specific
attacks/exploits?  How do other browsers like Firefox fare?