/*
 * assets/fonts.css
 *
 * PURPOSE: Self-hosted Inter font, replacing the Google Fonts CDN link.
 *
 * SECURITY: Resolves DAST SRI finding (CWE-829 / Medium).
 *   Google Fonts returns different CSS per User-Agent (different font subsets),
 *   making SRI hashing on the CDN URL impossible — the hash would break for
 *   browsers receiving a different response. Self-hosting eliminates the
 *   third-party dependency entirely; same-origin assets do not require SRI.
 *
 * SETUP: The pipeline downloads Inter WOFF2 files and places them in
 *   assets/fonts/ during the build step. See azure-pipelines.yml.
 *
 * Font files required (downloaded by pipeline):
 *   assets/fonts/Graphik-Regular.otf   (Regular)
 *   assets/fonts/Graphik-Medium.otf   (Medium)
 *   assets/fonts/Graphik-Semibold.otf   (SemiBold)
 *   assets/fonts/Graphik-Bold.otf   (Bold)
 *
 * Source: https://github.com/rsms/inter/releases  (OFL-1.1 licence)
 */

@font-face {
  font-family: 'Graphik';
  font-style:  normal;
  font-weight: 400;
  font-display: swap;
  src: url('fonts/Graphik-Regular.otf') format('opentype');
}

@font-face {
  font-family: 'Graphik';
  font-style:  normal;
  font-weight: 500;
  font-display: swap;
  src: url('fonts/Graphik-Medium.otf') format('opentype');
}

@font-face {
  font-family: 'Graphik';
  font-style:  normal;
  font-weight: 600;
  font-display: swap;
  src: url('fonts/Graphik-Semibold.otf') format('opentype');
}

@font-face {
  font-family: 'Graphik';
  font-style:  normal;
  font-weight: 700;
  font-display: swap;
  src: url('fonts/Graphik-Bold.otf') format('opentype');
}