i really like wordpress… this blog is using it.

what i don’t like if things become tooo „automatic“.

including fonts and scripts from external sources (google) that can be changed/updated/modified anytime… they could smuggle surveillance code into a billion wordpress installations and they gonna try anything possible to hack and spy on you.

to check your website open it with firefox or any other browser and go into source view (Strg+U in firefox) Strg+F let’s you usually search for „google“.

this way i fount out i am using two fonts that are loaded of google.

i then searched my wordpress installation for those fonts and removed the lines in the functions.php (enque_style… well yes why not).

find . -type f | xargs grep -l "Open+Sans"; # search for google's font
hit here:  ./wp-includes/script-loader.php

 find . -type f | xargs grep -l "Oswald"

hit here:  ./wp-content/themes/cwp-robi/functions.php

find . -type f | xargs grep -l "googleapis"; # there will be a lot of hits on that


# i found

function wp_default_styles( &$styles ) {
// Hotlink Open Sans, for now
                $open_sans_font_url = "https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,300,400,600&subset=$subsets";

# and also: (i just commented that out and see if it affects admin seriously or not... if it's just effects ok)

  $scripts->add( 'wp-lists', "/wp-includes/js/wp-lists$suffix.js", array( 'wp-ajax-response', 'jquery-color' ), false, 1 );

        // WordPress no longer uses or bundles Prototype or script.aculo.us. These are now pulled from an external source.
        $scripts->add( 'prototype', 'https://ajax.googleapis.com/ajax/libs/prototype/', array(), '1.7.1');
        $scripts->add( 'scriptaculous-root', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/scriptaculous.js', array('prototype'), '1.9.0');
        $scripts->add( 'scriptaculous-builder', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/builder.js', array('scriptaculous-root'), '1.9.0');
        $scripts->add( 'scriptaculous-dragdrop', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/dragdrop.js', array('scriptaculous-builder', 'scriptaculous-effects'), '1.9.0');
        $scripts->add( 'scriptaculous-effects', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/effects.js', array('scriptaculous-root'), '1.9.0');
        $scripts->add( 'scriptaculous-slider', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/slider.js', array('scriptaculous-effects'), '1.9.0');
        $scripts->add( 'scriptaculous-sound', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/sound.js', array( 'scriptaculous-root' ), '1.9.0' );
        $scripts->add( 'scriptaculous-controls', 'https://ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/controls.js', array('scriptaculous-root'), '1.9.0');

my startpage atleast is now google free.