From ecb13bb1343d14a7b42a55ee12ae0c15a575975f Mon Sep 17 00:00:00 2001
From: kj_sh604
Date: Mon, 16 Mar 2026 13:53:01 -0400
Subject: refactor: src/font.php

---
 src/font.php | 50 --------------------------------------------------
 1 file changed, 50 deletions(-)
 delete mode 100644 src/font.php

(limited to 'src/font.php')

diff --git a/src/font.php b/src/font.php
deleted file mode 100644
index d12ceb8..0000000
--- a/src/font.php
+++ /dev/null
@@ -1,50 +0,0 @@
-<?php
-/* font.php — serve font files from the server's font directories */
-
-$encoded = $_GET['f'] ?? '';
-if (empty($encoded)) {
-    http_response_code(400);
-    exit('Missing parameter');
-}
-
-$file = base64_decode($encoded, true);
-if ($file === false || !file_exists($file)) {
-    http_response_code(404);
-    exit('Font not found');
-}
-
-$real    = realpath($file);
-$allowed = ['/usr/share/fonts', '/usr/local/share/fonts'];
-
-foreach (glob('/home/*', GLOB_ONLYDIR) as $home) {
-    $allowed[] = $home . '/.local/share/fonts';
-    $allowed[] = $home . '/.fonts';
-}
-
-$ok = false;
-
-foreach ($allowed as $dir) {
-    if (str_starts_with($real, realpath($dir) ?: $dir)) {
-        $ok = true;
-        break;
-    }
-}
-
-if (!$ok) {
-    http_response_code(403);
-    exit('Access denied');
-}
-
-$ext  = strtolower(pathinfo($file, PATHINFO_EXTENSION));
-$mime = match ($ext) {
-    'ttf'   => 'font/ttf',
-    'otf'   => 'font/otf',
-    'woff'  => 'font/woff',
-    'woff2' => 'font/woff2',
-    default => 'application/octet-stream',
-};
-
-header("Content-Type: $mime");
-header('Cache-Control: public, max-age=31536000, immutable');
-header('Content-Length: ' . filesize($file));
-readfile($file);
-- 
cgit v1.2.3