Here on Windows 7 32-bit, this change actually disables the full font preview, which should show an alphabet using a font, and also a sample text in different sizes, in TC.HISTORY.TXT wrote:24.03.20 Fixed: Lister: Disallow Explorer preview (mode '8') for font files due to a security hole in Windows font handler. Can be enabled manually after Microsoft releases a patch via wincmd.ini [Configuration] FontPreview=1 or FontPreview=2 for only Windows 10 1607 or newer, where fonts are loaded outside the kernel (32/64)
However, I still see simplified 3-character font previews in some cases:
1) in \\Fonts, opened by cm_OpenFonts, there are 3-letter previews in TC's thumbnails view (Lister, though, doesn't open fonts at all in \\Fonts, because Lister only works in virtual folders for which TC can retrieve a real directory, which TC can't do in \\Fonts\ - a strange distinction from TC's Thumbs view);
2) in some virtual paths (it seems where TC can get a real directory): e.g. add some dir, except %windir%\fonts, to a new Windows Library named Fonts, then in cm_OpenDesktop, open Libraries, then Fonts. And when TC is in \\Fonts\ library, Lister/QuickView and TC's thumbnails both show 3-character font previews.
3) for font files stored in locations other than other than %windir%\fonts\, there are simplified previews both Lister in ExplorerPreview mode and TC's thumbnail view.
I get here simplified previews for, at least, fonts with *.fon, *.otf and *.ttf extensions.
Here's how a simplified font preview looks like in Lister:
http://live.staticflickr.com/65535/51019086522_c4e84e2b4d_m.jpg
Even though here Lister doesn't show "<Explorer>" text in the title (like "Lister <Explorer> - [<path_to_file>]"), which is usually an indication that ExplorerPreview is used, I actually get such a preview when I press 8 in Lister. Maybe this is because in that case Lister uses IThumbnailProvider instead of IPreviewHandler to show the preview.
By email, Christian Ghisler told that he doesn't get such simplified previews in own environment, and his guess is that on my system such font previews are generated by some 3rd party Explorer extenstions. Since I doubt this is the case, I'm posting it here to hear from users whether they get such simplified font previews in Lister and/or Thumbs mode too.
P.S. I'm not a security expert, and don't know whether such simplified font previews, probably generated by IThumbnailProvider, are safe in context of Windows font security bugs, but
there are recommendations, if I understand it right, to disable all kinds of font previews on unpatched Windows:
https://www.tenforums.com/windows-10-news/152790-type-1-font-parsing-remote-code-execution-vulnerability-windows.html
https://www.ghacks.net/2020/03/24/critical-font-parsing-issue-in-windows-revealed-fix-inside/