/*
 * assets/fonts.css
 *
 * PURPOSE: Self-hosted Inter font, replacing the Google Fonts CDN link.
 *
 * SECURITY: Resolves DAST SRI finding (CWE-829 / Medium).
 *   Google Fonts returns different CSS per User-Agent (different font subsets),
 *   making SRI hashing on the CDN URL impossible — the hash would break for
 *   browsers receiving a different response. Self-hosting eliminates the
 *   third-party dependency entirely; same-origin assets do not require SRI.
 *
 * SETUP: The pipeline downloads Inter WOFF2 files and places them in
 *   assets/fonts/ during the build step. See azure-pipelines.yml.
 *
 * Font files required (downloaded by pipeline):
 *   assets/fonts/inter-400.woff2   (Regular)
 *   assets/fonts/inter-500.woff2   (Medium)
 *   assets/fonts/inter-600.woff2   (SemiBold)
 *   assets/fonts/inter-700.woff2   (Bold)
 *
 * Source: https://github.com/rsms/inter/releases  (OFL-1.1 licence)
 */

@font-face {
  font-family: 'Inter';
  font-style:  normal;
  font-weight: 400;
  font-display: swap;
  src: url('fonts/inter-400.woff2') format('woff2');
}

@font-face {
  font-family: 'Inter';
  font-style:  normal;
  font-weight: 500;
  font-display: swap;
  src: url('fonts/inter-500.woff2') format('woff2');
}

@font-face {
  font-family: 'Inter';
  font-style:  normal;
  font-weight: 600;
  font-display: swap;
  src: url('fonts/inter-600.woff2') format('woff2');
}

@font-face {
  font-family: 'Inter';
  font-style:  normal;
  font-weight: 700;
  font-display: swap;
  src: url('fonts/inter-700.woff2') format('woff2');
}