From 41fa7fe9ed84c4b8989f622fb532722b7f39ad72 Mon Sep 17 00:00:00 2001
From: kj_sh604
Date: Sun, 1 Mar 2026 19:07:42 -0500
Subject: refactor: src/

---
 src/font.php | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 src/font.php

(limited to 'src/font.php')

diff --git a/src/font.php b/src/font.php
new file mode 100644
index 0000000..de39569
--- /dev/null
+++ b/src/font.php
@@ -0,0 +1,44 @@
+<?php
+/* font.php — serve font files from the server's font directories */
+
+$encoded = $_GET['f'] ?? '';
+if (empty($encoded)) {
+    http_response_code(400);
+    exit('Missing parameter');
+}
+
+$file = base64_decode($encoded, true);
+if ($file === false || !file_exists($file)) {
+    http_response_code(404);
+    exit('Font not found');
+}
+
+$real    = realpath($file);
+$allowed = ['/usr/share/fonts', '/usr/local/share/fonts'];
+$ok      = false;
+
+foreach ($allowed as $dir) {
+    if (str_starts_with($real, $dir)) {
+        $ok = true;
+        break;
+    }
+}
+
+if (!$ok) {
+    http_response_code(403);
+    exit('Access denied');
+}
+
+$ext  = strtolower(pathinfo($file, PATHINFO_EXTENSION));
+$mime = match ($ext) {
+    'ttf'   => 'font/ttf',
+    'otf'   => 'font/otf',
+    'woff'  => 'font/woff',
+    'woff2' => 'font/woff2',
+    default => 'application/octet-stream',
+};
+
+header("Content-Type: $mime");
+header('Cache-Control: public, max-age=31536000, immutable');
+header('Content-Length: ' . filesize($file));
+readfile($file);
-- 
cgit v1.2.3