komoot · lonvia · Aug 18, 2026 · Aug 17, 2026
diff --git a/website/photon/index.html b/website/photon/index.html
@@ -3,7 +3,9 @@
 <head>
     <meta charset="utf-8">
     <title>Photon, search-as-you-type with OpenStreetMap</title>
-    <link rel="stylesheet" href="https://unpkg.com/leaflet@1.9.4/dist/leaflet.css"/>
+    <link rel="stylesheet" href="https://unpkg.com/leaflet@1.9.4/dist/leaflet.css"
+          integrity="sha384-sHL9NAb7lN7rfvG5lfHpm643Xkcjzp4jFvuavGOndn6pjVqS6ny56CAt3nsEVT4H"
+          crossorigin="anonymous"/>
     <link rel="stylesheet" href="static/leaflet.photon/leaflet.photon.css">
     <link rel="stylesheet" href="static/css/app.css">
     <link rel="icon" href="static/img/favicon_photon_logo.ico">
@@ -165,7 +167,9 @@ <h2>Terms of Use</h2>
 <footer>
     An OpenStreetMap project run by <a href="https://www.komoot.de">komoot</a>
 </footer>
-<script src="https://unpkg.com/leaflet@1.9.4/dist/leaflet.js"></script>
+<script src="https://unpkg.com/leaflet@1.9.4/dist/leaflet.js"
+        integrity="sha384-cxOPjt7s7Iz04uaHJceBmS+qpjv2JkIHNVcuOrM+YHwZOmJGBXI00mdUXEq65HTH"
+        crossorigin="anonymous"></script>
 <script src="static/leaflet.photon/leaflet.photon.js"></script>
 <script src="config.js"></script>
 <script src="static/js/app.js"></script>

diff --git a/website/photon/static/css/app.css b/website/photon/static/css/app.css
@@ -1,25 +1,3 @@
-/* ************************************************* */
-/* ********************** FONTS ******************** */
-/* ************************************************* */
-
-@font-face {
-    font-family: 'droid_sansbold';
-    src: url('../font/droidsans-bold-webfont.eot');
-    src: url('../font/droidsans-bold-webfont.eot?#iefix') format('embedded-opentype'), url('../font/droidsans-bold-webfont.woff') format('woff'), url('../font/droidsans-bold-webfont.ttf') format('truetype'), url('../font/droidsans-bold-webfont.svg#droid_sansbold') format('svg');
-    font-weight: normal;
-    font-style: normal;
-
-}
-
-@font-face {
-    font-family: 'droid_sansregular';
-    src: url('../font/droidsans-webfont.eot');
-    src: url('../font/droidsans-webfont.eot?#iefix') format('embedded-opentype'), url('../font/droidsans-webfont.woff') format('woff'), url('../font/droidsans-webfont.ttf') format('truetype'), url('../font/droidsans-webfont.svg#droid_sansregular') format('svg');
-    font-weight: normal;
-    font-style: normal;
-
-}
-
 /* Generic */
 body {
     padding: 0;
@@ -38,7 +16,7 @@ hr, input, textarea, footer, header {
     box-sizing: border-box;
     margin: 0;
     padding: 0;
-    font-family: "droid_sansregular", sans-serif;
+    font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;
 }
 
 /* ************************************************* */

diff --git a/website/photon/static/font/droidsans-bold-webfont.eot b/website/photon/static/font/droidsans-bold-webfont.eot
diff --git a/website/photon/static/font/droidsans-bold-webfont.svg b/website/photon/static/font/droidsans-bold-webfont.svg
diff --git a/website/photon/static/font/droidsans-bold-webfont.ttf b/website/photon/static/font/droidsans-bold-webfont.ttf
diff --git a/website/photon/static/font/droidsans-bold-webfont.woff b/website/photon/static/font/droidsans-bold-webfont.woff
diff --git a/website/photon/static/font/droidsans-webfont.eot b/website/photon/static/font/droidsans-webfont.eot
diff --git a/website/photon/static/font/droidsans-webfont.svg b/website/photon/static/font/droidsans-webfont.svg
diff --git a/website/photon/static/font/droidsans-webfont.ttf b/website/photon/static/font/droidsans-webfont.ttf
diff --git a/website/photon/static/font/droidsans-webfont.woff b/website/photon/static/font/droidsans-webfont.woff
diff --git a/website/photon/static/img/solr.svg b/website/photon/static/img/solr.svg
diff --git a/website/photon/static/js/angular-leaflet-directive.js b/website/photon/static/js/angular-leaflet-directive.js
diff --git a/website/photon/static/js/angular-sanitize.js b/website/photon/static/js/angular-sanitize.js