Referer Spoofing + TypeKit

[ghost]

I''ve tried to get TypeKit to work by whitelisting it on Referer Spoofing, but it does not seem to work.

TypeKit generally needs to get the Referer of the site it is included on. So I whitelisted typekit.net assuming the 3rd Party request would be processed, but it doesn't appear to be.

It only works if whitelisting the actual site you are on.

[ghost]

I'd like to add to this, that I use Referer Control. The behavior of uMatrix seems to be to send that site's Referer, because Referer tests change from Google Search to that site.

I set that addon to do that (just send REFERER_HOST for all sites), and TypeKit fonts work.

[gorhill]

does not seem to work [...] It only works if whitelisting the actual site you are on.

It's not a bug, it's how the feature works: See Per scope switches:

allow a user to customize various settings for a specific scope

[ghost]

Is there any way within the context of uMatrix to make this work?

Otherwise I’m just going to have to globally disable it and keep using the
other add-on for now.

On Sun, Nov 23, 2014 at 11:24 AM, Raymond Hill [email protected]
wrote:

does not seem to work [...] It only works if whitelisting the actual site
you are on.

It's not a bug, it's how the feature works: See Per scope switches
https://github.com/gorhill/uMatrix/wiki/Per-scope-switches:

allow a user to customize various settings for a specific scope

—
Reply to this email directly or view it on GitHub
#68 (comment).

[myshen]

@CODYQX4 Open the "per scope switch" menu and turn off "Referer spoofing". That removes the conflict with Referer Control. Don't forget to save changes to the scope!

[ghost]

I disabled it globally a long time ago to fix that, as I spoof all sites with RefControl.

Sent from my iPhone 6 Plus

On Jan 23, 2015, at 11:30 AM, Matt Shen [email protected] wrote:

@CODYQX4 Open the "per scope switch" menu and turn off "Referer spoofing". That removes the conflict with Referer Control. Don't forget to save changes to the scope!

—
Reply to this email directly or view it on GitHub.

[myshen]

Sounds like a good solution for a more general problem. I think that it's possible to disable referrer spoofing only on specific sites, e.g.
referrer-spoof: wsj.com false
so I thought that might help with specific sites like TypeKit.