https://zh.wikipedia.org/wiki/MediaWiki:Gadget-webfont.js has the line
mw.loader.load('https://tools-static.wmflabs.org/cdnjs/ajax/libs/webfont/1.6.24/webfontloader.js')
and to return statements 'https://tools.wmflabs.org/zhnotofu/webfont.php?wf=
These shall be removed as it is considered third-party content.
(May need escalation to https://meta.wikimedia.org/wiki/Steward_requests/Miscellaneous#Please_remove_privacy_violating_site_CSS per T209998#6335220 or T208177#4703847.)