[BUG]: Phising warning on fonts.openmaptiles.org

[JoGorska]

Description

Client raised issue with us, that when accessing the sites containing maps, they get access blocked due to phising alert. Upon investigation I found that the site fonts.openmaptiles.org has phising alert. This site is the source of fonts used by maps.

It seems that Plotly.py is referencing fonts.openmaptiles here: mimeExtension.js, so the true source of the problem is Plotly JS, not sure if i should maybe raise a ticket there instead?

Screenshots/Video

I cannot reproduce what my client experienced exactly, as I don't use the same security. But when accessing the font site I get the phising alert in the browser.

Steps to reproduce

Plotly.py version: plotly==6.6.0

How to know that my map references the compromised source?

1. Go to a page with the Plotly map using chrome browser
2. open the devtools in chrome, go to Network
3. reload the page
4. use search option to search for openmaptiles

Notes

same issue reported in other libraries:

• OpenMapTiles ticket
• possible solution done here, exact line

Since I thought that OpenStreetMap is a problem I tried other map styles, but the file is still showing.

[emilykl]

Thanks for pointing this out, @JoGorska. This is indeed a change that will need to be made in plotly.js, so I'll transfer the issue to that repo.

We'll need to look into it a bit more to confirm, but switching to use the https://demotiles.maplibre.org/font/{fontstack}/{range}.pbf source seems like a reasonable approach, assuming they have all the fonts we reference.