From 43039326b161b72d551c1c8cd1a7b8ffbfa8f73c Mon Sep 17 00:00:00 2001 From: Jeff Carey Date: Thu, 14 May 2026 14:52:28 -0400 Subject: [PATCH 1/3] new assertion about tracking --- README.md | 5 +++-- examples/consumer-app/main.jsx | 3 +++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 27e7daa..f76c407 100644 --- a/README.md +++ b/README.md @@ -22,7 +22,8 @@ This pattern implements the following assertions from [reference-fonts-implement - `lc-006` — using a font differs from distributing a font - `pc-008` — self-hosting web fonts requires a web font license; desktop licenses do not permit web delivery - `bd-001` — self-hosted fonts integrate into CI/CD pipelines as versioned static assets -- `pc-010` — cross-origin font delivery requires CORS configuration +- `pc-010` — cross-origin font delivery requires CORS configuration; missing headers cause silent font blocking +- `pc-012` — some Monotype web font licenses require a tracking script alongside self-hosted font files; this pattern covers `@font-face` / asset delivery only—add a script to the consumer app (for example in `index.html` or via your framework) when your license mandates tracking In the consumer example, `@font-face` points at **`/fonts/...` on the same origin** as the Vite app, so you typically do not hit cross-origin `@font-face` blocking. **`pc-010` still applies** if you move font files to another origin (for example a CDN): that host must send correct `Access-Control-Allow-Origin` (and related) headers on font responses. @@ -79,4 +80,4 @@ Use GitHub Discussions (Q&A category) for questions about this pattern. ## License -Sample application code in this repository is licensed under the MIT License. The subset font file in examples/consumer-app/public/fonts/ is included only as a build/CI demonstration asset and licensed for limited testing purposes only; it is not licensed for regular use on websites or redistribution. Please refer to the LICENSE file in the repository for both licenses. Canonical assertion text in [reference-fonts-implementation](https://github.com/Monotype/reference-fonts-implementation) remains subject to that repository’s terms. +Sample application code in this repository is licensed under the MIT License. The subset font file in examples/consumer-app/public/fonts/ is included only as a build/CI demonstration asset and licensed for limited testing purposes only; it is not licensed for regular use on websites or redistribution. Please refer to the LICENSE file in the repository for both licenses. Canonical assertion text in [reference-fonts-implementation](https://github.com/Monotype/reference-fonts-implementation) remains subject to that repository’s terms. \ No newline at end of file diff --git a/examples/consumer-app/main.jsx b/examples/consumer-app/main.jsx index e3821d7..7fd2a84 100644 --- a/examples/consumer-app/main.jsx +++ b/examples/consumer-app/main.jsx @@ -3,6 +3,9 @@ import { createRoot } from "react-dom/client"; import App from "./App"; import "./fonts.css"; +// fonts.css covers @font-face delivery only. If your license requires a tracking script +// (pc-012 in reference-fonts-implementation), add it here or in index.html—this sample does not. + const root = document.getElementById("root"); createRoot(root).render( From 9b2819f2e0ceb16bfa10a1d182d226bc65c0f56e Mon Sep 17 00:00:00 2001 From: Jeff Carey Date: Thu, 14 May 2026 15:00:15 -0400 Subject: [PATCH 2/3] newline --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index f76c407..bc47a8d 100644 --- a/README.md +++ b/README.md @@ -80,4 +80,4 @@ Use GitHub Discussions (Q&A category) for questions about this pattern. ## License -Sample application code in this repository is licensed under the MIT License. The subset font file in examples/consumer-app/public/fonts/ is included only as a build/CI demonstration asset and licensed for limited testing purposes only; it is not licensed for regular use on websites or redistribution. Please refer to the LICENSE file in the repository for both licenses. Canonical assertion text in [reference-fonts-implementation](https://github.com/Monotype/reference-fonts-implementation) remains subject to that repository’s terms. \ No newline at end of file +Sample application code in this repository is licensed under the MIT License. The subset font file in examples/consumer-app/public/fonts/ is included only as a build/CI demonstration asset and licensed for limited testing purposes only; it is not licensed for regular use on websites or redistribution. Please refer to the LICENSE file in the repository for both licenses. Canonical assertion text in [reference-fonts-implementation](https://github.com/Monotype/reference-fonts-implementation) remains subject to that repository’s terms. From a036b42102c8794c95674e1719c2b1e142a75ed3 Mon Sep 17 00:00:00 2001 From: Jeff Carey Date: Thu, 14 May 2026 16:24:55 -0400 Subject: [PATCH 3/3] clarify personal privacy --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index bc47a8d..df505e1 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ This pattern implements the following assertions from [reference-fonts-implement - `pc-008` — self-hosting web fonts requires a web font license; desktop licenses do not permit web delivery - `bd-001` — self-hosted fonts integrate into CI/CD pipelines as versioned static assets - `pc-010` — cross-origin font delivery requires CORS configuration; missing headers cause silent font blocking -- `pc-012` — some Monotype web font licenses require a tracking script alongside self-hosted font files; this pattern covers `@font-face` / asset delivery only—add a script to the consumer app (for example in `index.html` or via your framework) when your license mandates tracking +- `pc-012` — some Monotype web font licenses require a tracking script alongside self-hosted font files; this pattern covers `@font-face` / asset delivery only—add a script to the consumer app (for example in `index.html` or via your framework) when your license mandates tracking. For privacy-related scope, see the **Clarification** on [pc-012](https://github.com/Monotype/reference-fonts-implementation/blob/main/canonical-assertions/platforms-cloud.md#some-monotype-web-font-licenses-require-a-tracking-script-alongside-self-hosted-font-files). In the consumer example, `@font-face` points at **`/fonts/...` on the same origin** as the Vite app, so you typically do not hit cross-origin `@font-face` blocking. **`pc-010` still applies** if you move font files to another origin (for example a CDN): that host must send correct `Access-Control-Allow-Origin` (and related) headers on font responses.