plotly / plotly/plotly.js

[BUG]: Phishing warning on fonts.openmaptiles.org

Offen
#7,755 2 Kommentare 2 Reaktionen 1 zugewiesene Person Auf GitHub ansehen

@emilykl arbeitet bereits daran.

Seit 31.8.2026.

bug P2 size: 1
Vorherrschende Sprache
JavaScript
Sterne
18.3k
Forks
2k
Ø Merge
2 T. 12 Std.
Gemergte PRs (30 T.)
28

Beschreibung

Description

Client raised issue with us, that when accessing the sites containing maps, they get access blocked due to phising alert. Upon investigation I found that the site fonts.openmaptiles.org has phising alert. This site is the source of fonts used by maps.

It seems that Plotly.py is referencing fonts.openmaptiles here: mimeExtension.js, so the true source of the problem is Plotly JS, not sure if i should maybe raise a ticket there instead?

Screenshots/Video

I cannot reproduce what my client experienced exactly, as I don't use the same security. But when accessing the font site I get the phising alert in the browser.

Image
Steps to reproduce

Plotly.py version: plotly==6.6.0

How to know that my map references the compromised source?

  1. Go to a page with the Plotly map using chrome browser
  2. open the devtools in chrome, go to Network
  3. reload the page
  4. use search option to search for openmaptiles
Image
Notes

same issue reported in other libraries:

Since I thought that OpenStreetMap is a problem I tried other map styles, but the file is still showing.

Beitragsleitfaden

Beitragsleitfaden öffnen

Erste Schritte

  1. Lies das ganze Issue und danach den Beitragsleitfaden des Projekts.
  2. Schreib ins Issue, dass du es übernimmst — das erspart doppelte Arbeit.
  3. Forke das Repository und arbeite in einem Branch.
  4. Öffne einen Pull Request, der die Issue-Nummer nennt.

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.