should_run() ) {
return;
}
$this->html = new HtmlProcessor();
$this->pipeline = new Pipeline();
$this->force = $this->is_probe();
ob_start( array( $this, 'process' ) );
}
/**
* Buffer callback.
*
* @param string $buffer Full HTML.
* @return string
*/
public function process( string $buffer ): string {
if ( '' === trim( $buffer ) || ! $this->looks_like_html( $buffer ) ) {
return $buffer;
}
// 1. Detect + localise (pipeline; force-all in probe mode). The
// consolidated stylesheet is recorded but NOT injected yet, so we can
// place preloads above it.
$buffer = $this->pipeline->process( $buffer, $this->force );
// 2. Strip now-useless Google resource hints.
if ( Settings::get( 'strip_hints', 1 ) ) {
$stripped = $this->html->strip_font_hints( $buffer, Providers::hint_hosts() );
$buffer = $stripped['html'];
}
// 3. Inject the head block in the right order:
// preloads → consolidated stylesheet → metric fallbacks.
$head = $this->build_head();
if ( '' !== $head ) {
$buffer = $this->html->before_head_close( $buffer, $head );
}
// 4. Log what we hosted this request (origin=buffer).
$this->log_usage();
return $buffer;
}
/**
* Build the ordered head block: preloads first (so the browser fetches the
* hero fonts before it even parses the stylesheet), then the consolidated
* stylesheet, then the metric-matched fallback faces.
*
* @return string
*/
private function build_head(): string {
$out = '';
$stylesheet = Consolidator::stylesheet_url();
// Preloads — above the stylesheet, deduped inside SmartPreload.
$out .= ( new SmartPreload() )->build();
// The single consolidated stylesheet — either inlined (non-render-
// blocking: no extra request) or as a normal .
if ( '' !== $stylesheet ) {
$inlined = false;
if ( Settings::get( 'inline_css', 0 ) ) {
$file = Consolidator::stylesheet_file();
if ( '' !== $file ) {
$storage = new Storage();
$css = $storage->exists( $file ) ? (string) @file_get_contents( $storage->path( $file ) ) : ''; // phpcs:ignore WordPress.WP.AlternativeFunctions
if ( '' !== $css ) {
$out .= '' . "\n";
$inlined = true;
}
}
}
if ( ! $inlined ) {
$out .= sprintf(
'' . "\n",
esc_url( $stylesheet )
);
}
}
// Metric-matched fallback faces (zero-CLS).
$touched = Consolidator::touched();
if ( Settings::get( 'metric_fallbacks', 1 ) && ! empty( $touched ) ) {
$css = ( new MetricFallbacks() )->build_for( $touched );
if ( '' !== $css ) {
$out .= '' . "\n";
}
}
return $out;
}
/**
* Persist hosted-font observations for this URL.
*/
private function log_usage(): void {
$touched = Consolidator::touched();
if ( empty( $touched ) ) {
return;
}
$records = array();
foreach ( $touched as $t ) {
$records[] = array(
'family' => $t['family'],
'weight' => $t['weight'],
'style' => $t['style'],
'origin' => 'buffer',
'rendered' => 0,
);
}
$url = home_url( add_query_arg( array() ) );
( new UsageTracker() )->record( $url, (int) get_queried_object_id(), $records );
}
/**
* Minify CSS for inlining: strip comments and collapse whitespace, while
* preserving values that matter (unicode-range, url(), font names). Safe and
* conservative — it never touches the inside of strings/urls.
*
* @param string $css CSS.
* @return string
*/
private function minify_css( string $css ): string {
// Remove /* ... */ comments (incl. the generated banner).
$css = (string) preg_replace( '#/\*.*?\*/#s', '', $css );
// Collapse all runs of whitespace to a single space.
$css = (string) preg_replace( '/\s+/', ' ', $css );
// Drop spaces around structural punctuation.
$css = (string) preg_replace( '/\s*([{};:,>])\s*/', '$1', $css );
// Remove the last semicolon before a closing brace, and any leftover gaps.
$css = str_replace( ';}', '}', $css );
return trim( $css );
}
/**
* Is this request a front-end page-builder EDITOR (not the live site)?
* Covers the major builders' edit modes via their own API where available,
* plus a query-string fallback. Conservative: any hit means "don't process".
*
* @return bool
*/
private static function is_builder_editor(): bool {
// Elementor edit/preview mode.
if ( did_action( 'elementor/loaded' ) && class_exists( '\Elementor\Plugin' ) ) {
$el = \Elementor\Plugin::instance();
if ( isset( $el->editor ) && method_exists( $el->editor, 'is_edit_mode' ) && $el->editor->is_edit_mode() ) {
return true;
}
if ( isset( $el->preview ) && method_exists( $el->preview, 'is_preview_mode' ) && $el->preview->is_preview_mode() ) {
return true;
}
}
// Beaver Builder active edit session.
if ( class_exists( '\FLBuilderModel' ) && method_exists( '\FLBuilderModel', 'is_builder_active' ) && \FLBuilderModel::is_builder_active() ) {
return true;
}
// Divi front-end builder.
if ( function_exists( 'et_core_is_fb_enabled' ) && et_core_is_fb_enabled() ) {
return true;
}
// Query-string fallback for builders without a stable API check here.
// phpcs:disable WordPress.Security.NonceVerification.Recommended
$flags = array( 'fl_builder', 'elementor-preview', 'et_fb', 'ct_builder', 'oxygen_iframe', 'brizy-edit', 'vcv-action', 'tve', 'bricks' );
foreach ( $flags as $f ) {
if ( isset( $_GET[ $f ] ) ) {
return true;
}
}
// phpcs:enable WordPress.Security.NonceVerification.Recommended
return false;
}
/**
* Should the buffer run for this request?
*
* @return bool
*/
private function should_run(): bool {
if ( ! Settings::get( 'enabled', 1 ) ) {
return false;
}
// Hard environment bail-outs.
if ( is_admin() || wp_doing_ajax() || wp_doing_cron() || is_feed() ) {
return false;
}
if ( ( defined( 'REST_REQUEST' ) && REST_REQUEST ) || ( defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST ) ) {
return false;
}
// Explicit kill switch.
if ( isset( $_GET['easyfonts'] ) && 'off' === $_GET['easyfonts'] ) { // phpcs:ignore WordPress.Security.NonceVerification
return false;
}
// Probe mode always runs (admin only).
if ( $this->is_probe() ) {
return true;
}
// Builder previews / customizer.
foreach ( self::BUILDER_PARAMS as $param ) {
if ( isset( $_GET[ $param ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification
return false;
}
}
if ( function_exists( 'is_customize_preview' ) && is_customize_preview() ) {
return false;
}
// Front-end page-builder EDIT modes (not just previews). When a builder
// loads its editor on a front-end URL, we must not strip/replace fonts
// or the user can't see real font styling while editing.
if ( self::is_builder_editor() ) {
return false;
}
/**
* Allow themes/plugins to force-skip Easy Fonts for the current request
* (e.g. bespoke editors). Return true to skip.
*
* @param bool $skip
*/
if ( apply_filters( 'easyfonts_skip_request', false ) ) {
return false;
}
// PageSpeed=off convention.
if ( isset( $_GET['PageSpeed'] ) && 'off' === $_GET['PageSpeed'] ) { // phpcs:ignore WordPress.Security.NonceVerification
return false;
}
// Excluded URLs.
$excluded = (array) Settings::get( 'excluded_urls', array() );
$path = (string) wp_parse_url( home_url( add_query_arg( array() ) ), PHP_URL_PATH );
foreach ( $excluded as $ex ) {
$ex = trim( (string) $ex );
if ( '' !== $ex && false !== strpos( $path, $ex ) ) {
return false;
}
}
return true;
}
/**
* Admin-triggered probe: ?easyfonts_probe=1 (force a full uncached pass).
*
* @return bool
*/
private function is_probe(): bool {
return isset( $_GET['easyfonts_probe'] ) && current_user_can( 'manage_options' ); // phpcs:ignore WordPress.Security.NonceVerification
}
/**
* Quick HTML sniff (skip JSON/feeds/fragments).
*
* @param string $buffer Buffer.
* @return bool
*/
private function looks_like_html( string $buffer ): bool {
$head = ltrim( substr( $buffer, 0, 200 ) );
return ( false !== stripos( $head, '