HUGE GDPR ISSUE

  • Resolved Anonymous User 17612203

    (@anonymized-17612203)


    4 years, 6 months ago

    Through the functions.php, FVM is caling 846 URLs starting with this:

    https://fonts.googleapis.com/css?…

    and attaching the 846 fonts:

    ‘ABeeZee’,’Abel’,’Abhaya Libre’,’Abril Fatface’,’Aclonica’,’Acme’,’Actor’,’Adamina’,’Advent Pro’,’Aguafina Script’,’Akronim’,’Aladin’,’Aldrich’,’Alef’,’Alegreya’,’Alegreya SC’,’Alegreya Sans’,’Alegreya Sans SC’,’Alex Brush’,’Alfa Slab One’,’Alice’,’Alike’,’Alike Angular’,’Allan’,’Allerta’,’Allerta Stencil’,’Allura’,’Almendra’,’Almendra Display’,’Almendra SC’,’Amarante’,’Amaranth’,’Amatic SC’,’Amatica SC’,’Amethysta’,’Amiko’,’Amiri’,’Amita’,’Anaheim’,’Andada’,’Andika’,’Angkor’,’Annie Use Your Telescope’,’Anonymous Pro’,’Antic’,’Antic Didone’,’Antic Slab’,’Anton’,’Arapey’,’Arbutus’,’Arbutus Slab’,’Architects Daughter’,’Archivo’,’Archivo Black’,’Archivo Narrow’,’Aref Ruqaa’,’Arima Madurai’,’Arimo’,’Arizonia’,’Armata’,’Arsenal’,’Artifika’,’Arvo’,’Arya’,’Asap’,’Asap Condensed’,’Asar’,’Asset’,’Assistant’,’Astloch’,’Asul’,’Athiti’,’Atma’,’Atomic Age’,’Aubrey’,’Audiowide’,’Autour One’,’Average’,’Average Sans’,’Averia Gruesa Libre’,’Averia Libre’,’Averia Sans Libre’,’Averia Serif Libre’,’Bad Script’,’Bahiana’,’Baloo’,’Baloo Bhai’,’Baloo Bhaijaan’,’Baloo Bhaina’,’Baloo Chettan’,’Baloo Da’,’Baloo Paaji’,’Baloo Tamma’,’Baloo Tammudu’,’Baloo Thambi’,’Balthazar’,’Bangers’,’Barrio’,’Basic’,’Battambang’,’Baumans’,’Bayon’,’Belgrano’,’Bellefair’,’Belleza’,’BenchNine’,’Bentham’,’Berkshire Swash’,’Bevan’,’Bigelow Rules’,’Bigshot One’,’Bilbo’,’Bilbo Swash Caps’,’BioRhyme’,’BioRhyme Expanded’,’Biryani’,’Bitter’,’Black Ops One’,’Bokor’,’Bonbon’,’Boogaloo’,’Bowlby One’,’Bowlby One SC’,’Brawler’,’Bree Serif’,’Bubblegum Sans’,’Bubbler One’,’Buda’,’Buenard’,’Bungee’,’Bungee Hairline’,’Bungee Inline’,’Bungee Outline’,’Bungee Shade’,’Butcherman’,’Butterfly Kids’,’Cabin’,’Cabin Condensed’,’Cabin Sketch’,’Caesar Dressing’,’Cagliostro’,’Cairo’,’Calligraffitti’,’Cambay’,’Cambo’,’Candal’,’Cantarell’,’Cantata One’,’Cantora One’,’Capriola’,’Cardo’,’Carme’,’Carrois Gothic’,’Carrois Gothic SC’,’Carter One’,’Catamaran’,’Caudex’,’Caveat’,’Caveat Brush’,’Cedarville Cursive’,’Ceviche One’,’Changa’,’Changa One’,’Chango’,’Chathura’,’Chau Philomene One’,’Chela One’,’Chelsea Market’,’Chenla’,’Cherry Cream Soda’,’Cherry Swash’,’Chewy’,’Chicle’,’Chivo’,’Chonburi’,’Cinzel’,’Cinzel Decorative’,’Clicker Script’,’Coda’,’Coda Caption’,’Codystar’,’Coiny’,’Combo’,’Comfortaa’,’Coming Soon’,’Concert One’,’Condiment’,’Content’,’Contrail One’,’Convergence’,’Cookie’,’Copse’,’Corben’,’Cormorant’,’Cormorant Garamond’,’Cormorant Infant’,’Cormorant SC’,’Cormorant Unicase’,’Cormorant Upright’,’Courgette’,’Cousine’,’Coustard’,’Covered By Your Grace’,’Crafty Girls’,’Creepster’,’Crete Round’,’Crimson Text’,’Croissant One’,’Crushed’,’Cuprum’,’Cutive’,’Cutive Mono’,’Damion’,’Dancing Script’,’Dangrek’,’David Libre’,’Dawning of a New Day’,’Days One’,’Dekko’,’Delius’,’Delius Swash Caps’,’Delius Unicase’,’Della Respira’,’Denk One’,’Devonshire’,’Dhurjati’,’Didact Gothic’,’Diplomata’,’Diplomata SC’,’Domine’,’Donegal One’,’Doppio One’,’Dorsa’,’Dosis’,’Dr Sugiyama’,’Droid Sans’,’Droid Sans Mono’,’Droid Serif’,’Duru Sans’,’Dynalight’,’EB Garamond’,’Eagle Lake’,’Eater’,’Economica’,’Eczar’,’El Messiri’,’Electrolize’,’Elsie’,’Elsie Swash Caps’,’Emblema One’,’Emilys Candy’,’Encode Sans’,’Encode Sans Condensed’,’Encode Sans Expanded’,’Encode Sans Semi Condensed’,’Encode Sans Semi Expanded’,’Engagement’,’Englebert’,’Enriqueta’,’Erica One’,’Esteban’,’Euphoria Script’,’Ewert’,’Exo’,’Exo 2′,’Expletus Sans’,’Fanwood Text’,’Farsan’,’Fascinate’,’Fascinate Inline’,’Faster One’,’Fasthand’,’Fauna One’,’Faustina’,’Federant’,’Federo’,’Felipa’,’Fenix’,’Finger Paint’,’Fira Mono’,’Fira Sans’,’Fira Sans Condensed’,’Fira Sans Extra Condensed’,’Fjalla One’,’Fjord One’,’Flamenco’,’Flavors’,’Fondamento’,’Fontdiner Swanky’,’Forum’,’Francois One’,’Frank Ruhl Libre’,’Freckle Face’,’Fredericka the Great’,’Fredoka One’,’Freehand’,’Fresca’,’Frijole’,’Fruktur’,’Fugaz One’,’GFS Didot’,’GFS Neohellenic’,’Gabriela’,’Gafata’,’Galada’,’Galdeano’,’Galindo’,’Gentium Basic’,’Gentium Book Basic’,’Geo’,’Geostar’,’Geostar Fill’,’Germania One’,’Gidugu’,’Gilda Display’,’Give You Glory’,’Glass Antiqua’,’Glegoo’,’Gloria Hallelujah’,’Goblin One’,’Gochi Hand’,’Gorditas’,’Goudy Bookletter 1911′,’Graduate’,’Grand Hotel’,’Gravitas One’,’Great Vibes’,’Griffy’,’Gruppo’,’Gudea’,’Gurajada’,’Habibi’,’Halant’,’Hammersmith One’,’Hanalei’,’Hanalei Fill’,’Handlee’,’Hanuman’,’Happy Monkey’,’Harmattan’,’Headland One’,’Heebo’,’Henny Penny’,’Herr Von Muellerhoff’,’Hind’,’Hind Guntur’,’Hind Madurai’,’Hind Siliguri’,’Hind Vadodara’,’Holtwood One SC’,’Homemade Apple’,’Homenaje’,’IM Fell DW Pica’,’IM Fell DW Pica SC’,’IM Fell Double Pica’,’IM Fell Double Pica SC’,’IM Fell English’,’IM Fell English SC’,’IM Fell French Canon’,’IM Fell French Canon SC’,’IM Fell Great Primer’,’IM Fell Great Primer SC’,’Iceberg’,’Iceland’,’Imprima’,’Inconsolata’,’Inder’,’Indie Flower’,’Inika’,’Inknut Antiqua’,’Irish Grover’,’Istok Web’,’Italiana’,’Italianno’,’Itim’,’Jacques Francois’,’Jacques Francois Shadow’,’Jaldi’,’Jim Nightshade’,’Jockey One’,’Jolly Lodger’,’Jomhuria’,’Josefin Sans’,’Josefin Slab’,’Joti One’,’Judson’,’Julee’,’Julius Sans One’,’Junge’,’Jura’,’Just Another Hand’,’Just Me Again Down Here’,’Kadwa’,’Kalam’,’Kameron’,’Kanit’,’Kantumruy’,’Karla’,’Karma’,’Katibeh’,’Kaushan Script’,’Kavivanar’,’Kavoon’,’Kdam Thmor’,’Keania One’,’Kelly Slab’,’Kenia’,’Khand’,’Khmer’,’Khula’,’Kite One’,’Knewave’,’Kotta One’,’Koulen’,’Kranky’,’Kreon’,’Kristi’,’Krona One’,’Kumar One’,’Kumar One Outline’,’Kurale’,’La Belle Aurore’,’Laila’,’Lakki Reddy’,’Lalezar’,’Lancelot’,’Lateef’,’Lato’,’League Script’,’Leckerli One’,’Ledger’,’Lekton’,’Lemon’,’Lemonada’,’Libre Barcode 128′,’Libre Barcode 128 Text’,’Libre Barcode 39′,’Libre Barcode 39 Extended’,’Libre Barcode 39 Extended Text’,’Libre Barcode 39 Text’,’Libre Baskerville’,’Libre Franklin’,’Life Savers’,’Lilita One’,’Lily Script One’,’Limelight’,’Linden Hill’,’Lobster’,’Lobster Two’,’Londrina Outline’,’Londrina Shadow’,’Londrina Sketch’,’Londrina Solid’,’Lora’,’Love Ya Like A Sister’,’Loved by the King’,’Lovers Quarrel’,’Luckiest Guy’,’Lusitana’,’Lustria’,’Macondo’,’Macondo Swash Caps’,’Mada’,’Magra’,’Maiden Orange’,’Maitree’,’Mako’,’Mallanna’,’Mandali’,’Manuale’,’Marcellus’,’Marcellus SC’,’Marck Script’,’Margarine’,’Marko One’,’Marmelad’,’Martel’,’Martel Sans’,’Marvel’,’Mate’,’Mate SC’,’Maven Pro’,’McLaren’,’Meddon’,’MedievalSharp’,’Medula One’,’Meera Inimai’,’Megrim’,’Meie Script’,’Merienda’,’Merienda One’,’Merriweather’,’Merriweather Sans’,’Metal’,’Metal Mania’,’Metamorphous’,’Metrophobic’,’Michroma’,’Milonga’,’Miltonian’,’Miltonian Tattoo’,’Miniver’,’Miriam Libre’,’Mirza’,’Miss Fajardose’,’Mitr’,’Modak’,’Modern Antiqua’,’Mogra’,’Molengo’,’Molle’,’Monda’,’Monofett’,’Monoton’,’Monsieur La Doulaise’,’Montaga’,’Montez’,’Montserrat’,’Montserrat Alternates’,’Montserrat Subrayada’,’Moul’,’Moulpali’,’Mountains of Christmas’,’Mouse Memoirs’,’Mr Bedfort’,’Mr Dafoe’,’Mr De Haviland’,’Mrs Saint Delafield’,’Mrs Sheppards’,’Mukta’,’Mukta Mahee’,’Mukta Malar’,’Mukta Vaani’,’Muli’,’Mystery Quest’,’NTR’,’Neucha’,’Neuton’,’New Rocker’,’News Cycle’,’Niconne’,’Nixie One’,’Nobile’,’Nokora’,’Norican’,’Nosifer’,’Nothing You Could Do’,’Noticia Text’,’Noto Sans’,’Noto Serif’,’Nova Cut’,’Nova Flat’,’Nova Mono’,’Nova Oval’,’Nova Round’,’Nova Script’,’Nova Slim’,’Nova Square’,’Numans’,’Nunito’,’Nunito Sans’,’Odor Mean Chey’,’Offside’,’Old Standard TT’,’Oldenburg’,’Oleo Script’,’Oleo Script Swash Caps’,’Open Sans’,’Open Sans Condensed’,’Oranienbaum’,’Orbitron’,’Oregano’,’Orienta’,’Original Surfer’,’Oswald’,’Over the Rainbow’,’Overlock’,’Overlock SC’,’Overpass’,’Overpass Mono’,’Ovo’,’Oxygen’,’Oxygen Mono’,’PT Mono’,’PT Sans’,’PT Sans Caption’,’PT Sans Narrow’,’PT Serif’,’PT Serif Caption’,’Pacifico’,’Padauk’,’Palanquin’,’Palanquin Dark’,’Pangolin’,’Paprika’,’Parisienne’,’Passero One’,’Passion One’,’Pathway Gothic One’,’Patrick Hand’,’Patrick Hand SC’,’Pattaya’,’Patua One’,’Pavanam’,’Paytone One’,’Peddana’,’Peralta’,’Permanent Marker’,’Petit Formal Script’,’Petrona’,’Philosopher’,’Piedra’,’Pinyon Script’,’Pirata One’,’Plaster’,’Play’,’Playball’,’Playfair Display’,’Playfair Display SC’,’Podkova’,’Poiret One’,’Poller One’,’Poly’,’Pompiere’,’Pontano Sans’,’Poppins’,’Port Lligat Sans’,’Port Lligat Slab’,’Pragati Narrow’,’Prata’,’Preahvihear’,’Press Start 2P’,’Pridi’,’Princess Sofia’,’Prociono’,’Prompt’,’Prosto One’,’Proza Libre’,’Puritan’,’Purple Purse’,’Quando’,’Quantico’,’Quattrocento’,’Quattrocento Sans’,’Questrial’,’Quicksand’,’Quintessential’,’Qwigley’,’Racing Sans One’,’Radley’,’Rajdhani’,’Rakkas’,’Raleway’,’Raleway Dots’,’Ramabhadra’,’Ramaraja’,’Rambla’,’Rammetto One’,’Ranchers’,’Rancho’,’Ranga’,’Rasa’,’Rationale’,’Ravi Prakash’,’Redressed’,’Reem Kufi’,’Reenie Beanie’,’Revalia’,’Rhodium Libre’,’Ribeye’,’Ribeye Marrow’,’Righteous’,’Risque’,’Roboto’,’Roboto Condensed’,’Roboto Mono’,’Roboto Slab’,’Rochester’,’Rock Salt’,’Rokkitt’,’Romanesco’,’Ropa Sans’,’Rosario’,’Rosarivo’,’Rouge Script’,’Rozha One’,’Rubik’,’Rubik Mono One’,’Ruda’,’Rufina’,’Ruge Boogie’,’Ruluko’,’Rum Raisin’,’Ruslan Display’,’Russo One’,’Ruthie’,’Rye’,’Sacramento’,’Sahitya’,’Sail’,’Saira’,’Saira Condensed’,’Saira Extra Condensed’,’Saira Semi Condensed’,’Salsa’,’Sanchez’,’Sancreek’,’Sansita’,’Sarala’,’Sarina’,’Sarpanch’,’Satisfy’,’Scada’,’Scheherazade’,’Schoolbell’,’Scope One’,’Seaweed Script’,’Secular One’,’Sedgwick Ave’,’Sedgwick Ave Display’,’Sevillana’,’Seymour One’,’Shadows Into Light’,’Shadows Into Light Two’,’Shanti’,’Share’,’Share Tech’,’Share Tech Mono’,’Shojumaru’,’Short Stack’,’Shrikhand’,’Siemreap’,’Sigmar One’,’Signika’,’Signika Negative’,’Simonetta’,’Sintony’,’Sirin Stencil’,’Six Caps’,’Skranji’,’Slabo 13px’,’Slabo 27px’,’Slackey’,’Smokum’,’Smythe’,’Sniglet’,’Snippet’,’Snowburst One’,’Sofadi One’,’Sofia’,’Sonsie One’,’Sorts Mill Goudy’,’Source Code Pro’,’Source Sans Pro’,’Source Serif Pro’,’Space Mono’,’Special Elite’,’Spectral’,’Spicy Rice’,’Spinnaker’,’Spirax’,’Squada One’,’Sree Krushnadevaraya’,’Sriracha’,’Stalemate’,’Stalinist One’,’Stardos Stencil’,’Stint Ultra Condensed’,’Stint Ultra Expanded’,’Stoke’,’Strait’,’Sue Ellen Francisco’,’Suez One’,’Sumana’,’Sunshiney’,’Supermercado One’,’Sura’,’Suranna’,’Suravaram’,’Suwannaphum’,’Swanky and Moo Moo’,’Syncopate’,’Tangerine’,’Taprom’,’Tauri’,’Taviraj’,’Teko’,’Telex’,’Tenali Ramakrishna’,’Tenor Sans’,’Text Me One’,’The Girl Next Door’,’Tienne’,’Tillana’,’Timmana’,’Tinos’,’Titan One’,’Titillium Web’,’Trade Winds’,’Trirong’,’Trocchi’,’Trochut’,’Trykker’,’Tulpen One’,’Ubuntu’,’Ubuntu Condensed’,’Ubuntu Mono’,’Ultra’,’Uncial Antiqua’,’Underdog’,’Unica One’,’UnifrakturCook’,’UnifrakturMaguntia’,’Unkempt’,’Unlock’,’Unna’,’VT323′,’Vampiro One’,’Varela’,’Varela Round’,’Vast Shadow’,’Vesper Libre’,’Vibur’,’Vidaloka’,’Viga’,’Voces’,’Volkhov’,’Vollkorn’,’Voltaire’,’Waiting for the Sunrise’,’Wallpoet’,’Walter Turncoat’,’Warnes’,’Wellfleet’,’Wendy One’,’Wire One’,’Work Sans’,’Yanone Kaffeesatz’,’Yantramanav’,’Yatra One’,’Yellowtail’,’Yeseva One’,’Yesteryear’,’Yrsa’,’Zeyada’,’Zilla Slab’,’Zilla Slab Highlight’

    THIS IS A HUGE GDPR ISSUE !!!!

    I have allreay set the option “Remove Google Fonts completely”

Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter Anonymous User 17612203

    (@anonymized-17612203)

    It also caused my webhoster to block the db user which ends in broken site

    Plugin Author Raul P.

    (@alignak)

    I’m sorry, but I don’t think you understood what that code is doing.

    First, google fonts are only really an issue in Germany, but in this case, it’s not applicable as there are no requests on the plugin to google fonts.

    What that code is doing, is not requesting anything from google fonts.
    It’s an array with all known google font family names, that is hard coded there (it’s not
    fetched from anywhere) and it’s used purely, when merging google fonts your site may have, for the purpose of verifying if those font families are valid.

    If you don’t have any google fonts included on your theme or by any other plugin, then there is nothing GDPR related here, and this code will never run.

    If you are including google fonts on your site, this will simply check against that list (the names… again nothing is fetched from google) for invalid names.

    This is needed because if a site has 5 google fonts and one of the family names happen to be invalid, the resulting merged final url for that would return a 404 from google. So to prevent that, whenever FVM detects google fonts on your page, it will check if they are valid against the list (it doesn’t communicate with google or anywhere else) and remove the ones that should not exist.

    It’s your choice to include google fonts or not on your site. If you don’t have any, for sure FVM won’t be adding any to your site… so check carefully, using gtmetrix.com or google chrome dev tools (network tab) if there are any google fonts in use, when FVM is disabled.

    —

    If your hosting ended up blocking your mysql user, it’s likely due to your mysql using too many resources. FVM doesn’t save cache files on the database, so again, it’s completely unrelated. All cache files are saved on the cache directory, as files.

    Again, google fonts wouldn’t also be related to the database, as that information you see on the code, is static and doesn’t need anything from the database.

    Please check if you already use google fonts on your site, before you install FVM.
    If you have any, even if they are included inside third party scripts, you need to find a way to remove it manually.

    The option to remove google fonts on FVM, only works for enqueued css files.
    So if a plugin is enqueuing a css font with a google font url, you can remove it using that option and it won’t show up on the site.
    However, this only works for properly enqueued files, as explained in the faqs.

    Any google fonts added by JavaScript, third party scripts or hard coded on the theme/plugins without following the official wordpress enqueue method, cannot be detected by FVM and therefore will be left alone (you need to remove that extra stuff yourself).

    Thread Starter Anonymous User 17612203

    (@anonymized-17612203)

    Sorry, you don’t understand te issue!

    When I tested the site in gtmetrix.com I saw 438 requests, most to fonts.googleapis.com. Requests for different fonts like raleway.

    I have scanned alle files on my installation for raleway and googleapis.com and did the same in the db. The only place where both keywords are in is this functions.php of your plugin.

    I do not understand what your plugin is doing… doens’t matter, I don’t need to. There should be no need to do frontend calls to googleapis.com !!!

    GDPR is an european issue, but also a worldwide issue. Don’t blame germans to have an issue with it.

    • This reply was modified 4 years, 6 months ago by Anonymous User 17612203.
    • This reply was modified 4 years, 6 months ago by Anonymous User 17612203.
    Thread Starter Anonymous User 17612203

    (@anonymized-17612203)

    Issue closed? You think it is done that easy? The issue is still there… looks like I should write a detailed review of you plugin, not only here.

    Plugin Author Raul P.

    (@alignak)

    I can guarantee that those 438 requests are not coming from that code. That I am absolutely sure about.

    However, FVM will put together whatever you throw at it.

    Some other plugin may be calling google api and for some reason or error in their code, it may have been caught on FVM filters.

    Kindly post your gtmetrix report, with the plugin off, and then with the plugin on.
    I may be able to tell you where are those fonts coming from.

    If you are doing development on a test server, I can also suggest you to test using the default wordpress theme first and see if the google fonts show up. Another possibility, is that you can try to disable other plugins one by one, and see what plugin is actually calling those google fonts.

    Purge cache after each change (if any on your server) and test it again.

    Thread Starter Anonymous User 17612203

    (@anonymized-17612203)

    Again, there is no other plugin having somewhere written the font raleway. So this must come from fvm.

    It can for sure be a conflict with something else on my site… but it must be together with fvm.

    I have deactivated the plugin and will not reactivate it again.

    Plugin Author Raul P.

    (@alignak)

    There may not be any plugin using the name Raleway but it doesn’t need to be. It could come from an api request or from the database.

    The fact that FVM “knows about Raleway” (it’s a simple list of possible fonts), doesn’t mean it’s using or injecting anything on the site.

    You don’t need to install the plugin if you don’t wish to do so, however just because we don’t know where the conflict may be coming from, it doesn’t mean it’s from the last plugin you installed.

    The only way to be sure, would be to test as I explained, disabling other plugins one by one (with fvm enabled) and see if the fonts disappear or not.

    I’m sure that if you install FVM on a default wordpress site, you won’t see any google fonts that are not already in use, else there would be a lot more reports out of the 100k users using the plugin, complaining that we are loading 400+ google fonts on their sites.

    I’m sorry if for some reason there is some conflict on your specific site, but I have no idea what you are using, who coded it, or who changed what for it to happen.

    I can only guarantee that code is not injecting any fonts on your site, hence if you are not willing to look further into the actual reason behind the issue, I’ll mark it as solved, as it doesn’t happen to anyone else other than your specific site.

    Should you wish to look into it anytime in the future, simply or reach out to support via fastvelocity.com

    Thanks

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘HUGE GDPR ISSUE’ is closed to new replies.