plotly / plotly/plotly.js

[BUG]: Phishing warning on fonts.openmaptiles.org

Abierto
#7,755 2 comentarios 2 reacciones 1 asignado Ver en GitHub

@emilykl ya está trabajando en esto.

Desde el 31/8/2026.

bug P2 size: 1
Lenguaje dominante
JavaScript
Estrellas
18.3k
Forks
2k
Merge medio
2 d 12 h
PR fusionados (30 d)
28

Descripción

Description

Client raised issue with us, that when accessing the sites containing maps, they get access blocked due to phising alert. Upon investigation I found that the site fonts.openmaptiles.org has phising alert. This site is the source of fonts used by maps.

It seems that Plotly.py is referencing fonts.openmaptiles here: mimeExtension.js, so the true source of the problem is Plotly JS, not sure if i should maybe raise a ticket there instead?

Screenshots/Video

I cannot reproduce what my client experienced exactly, as I don't use the same security. But when accessing the font site I get the phising alert in the browser.

Image
Steps to reproduce

Plotly.py version: plotly==6.6.0

How to know that my map references the compromised source?

  1. Go to a page with the Plotly map using chrome browser
  2. open the devtools in chrome, go to Network
  3. reload the page
  4. use search option to search for openmaptiles
Image
Notes

same issue reported in other libraries:

Since I thought that OpenStreetMap is a problem I tried other map styles, but the file is still showing.

Guía de contribución

Abrir la guía de contribución

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.