Font icons are not loaded in IE11 / Edge running on Windows 10

6 posts, 0 answers
  1. Telerik Admin
    Telerik Admin avatar
    1690 posts
    Member since:
    Oct 2004

    Posted 30 Mar Link to this post

    In Windows 10 there is a feature(and a policy that applies the feature), which blocks the so-called "untrusted fonts". Untrusted fonts mean any font not installed %windir%/fonts, including web fonts.

    With this feature enabled (or the policy applied) custom fonts, such as font icons will not be loaded regardless of the provider. Hence, font icons used by Kendo UI, Kendo UI for Angular and Telerik UI for ASP.NET AJAX, MVC, Core will not be loaded.

    More information about the Windows 10 feature that blocks the untrusted font icons could be found below:

    https://support.microsoft.com/en-us/help/3053676/windows-10-technical-preview-adds-a-feature-that-blocks-untrusted-fonts

  2. Alan
    Alan avatar
    15 posts
    Member since:
    Apr 2013

    Posted 11 May Link to this post

    So the unfortunate solution would be to use the last Kendo UI version (2016 version) that used images instead of font icons?

    I'm using Kendo UI on sites accessed by government persons and since we don't have control over how their networks may configure their machines, if they are blocking untrusted fonts (which can be done in Windows 7 as well) then there is no way we could ever use a Kendo UI version beyond the last 2016 ver.

    I like font icons, but can't justify paying for licenses for future versions when I know that portions of my user base may never be able to use font icons for the foreseeable future, thus making Kendo UI somewhat unusable in my world.

     

     

     

  3. Ivan Zhekov
    Admin
    Ivan Zhekov avatar
    581 posts

    Posted 15 May Link to this post

    Alan,

    as of now we don't really have an answer for that question.

    We are evaluating a couple of options, namely, providing an alternative stylesheet that uses image icons or employing svg icons, with both having their ups and downs.

    The ups for image icon alternative are that images are unlikely to be disabled as technology anytime soon, unless you are browsing in windows high contrast mode with a browser lower than Edge. The downs are that we need at least 3 sprites for the task and a workaround for the aforementioned high contrast mode.

    The ups for svg is that it doesn't suffer from the high contrast issue; it's scalable; controllable by css (if made the correct way)... The downs are higher markup payload; couple of browser issues to name a few.

    As soon as we have chosen a direction, we'll update this thread with our intended resolution.

    Regards,
    Ivan Zhekov
    Telerik by Progress
    Try our brand new, jQuery-free Angular 2 components built from ground-up which deliver the business app essential building blocks - a grid component, data visualization (charts) and form elements.
  4. Alan
    Alan avatar
    15 posts
    Member since:
    Apr 2013

    Posted 16 May in reply to Ivan Zhekov Link to this post

    Understand, and thanks for the reply. If I can supply any additional information regarding this kind of scenario, please let me know.
  5. EIMCM
    EIMCM avatar
    5 posts
    Member since:
    Nov 2010

    Posted 26 Jul in reply to Ivan Zhekov Link to this post

    Running into this issue as well.  In creating our workaround it would be good to know if this is something you are still looking at?  Any possibility of it being in a 2017 release?
  6. Ivan Zhekov
    Admin
    Ivan Zhekov avatar
    581 posts

    Posted 28 Jul Link to this post

    According to a recent Microsoft blog post -- https://blogs.technet.microsoft.com/secguide/2017/06/15/dropping-the-untrusted-font-blocking-setting/ -- Microsoft is dropping the setting (stated in the title), or removing the recommendation to enable this setting (stated later in the text).

    With that in mind it seems, that the policy will be either removed or needs to be disabled without any security consequences. Note: according to the last comment, disabling the policy does not enable font downloading (which is another security policy).

    We'll monitor closely the development of the issue and if need be, we'll provide a fix.

    Regards,
    Ivan Zhekov
    Progress Telerik
    Try our brand new, jQuery-free Angular 2 components built from ground-up which deliver the business app essential building blocks - a grid component, data visualization (charts) and form elements.
Back to Top