fix: load Google Fonts correctly with strict CSP
Node.js CI / CI (pull_request) Successful in 1m37s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m41s

- Allow fonts.googleapis.com in style-src and fonts.gstatic.com in font-src
- Add Google Fonts preconnect links and import (Griffy, Kalam, Creepster, Henny Penny)
- Set body font to Kalam and heading font to Griffy
- Disable Angular inlineCritical optimisation to prevent deferred CSS loading via onload attribute, which was blocked by the strict script-src CSP
This commit is contained in:
2026-03-05 10:26:31 -08:00
committed by Naomi Carrigan
parent 163738867b
commit 3b3ac3d1ef
4 changed files with 32 additions and 3 deletions
+5
View File
@@ -25,6 +25,11 @@
},
"configurations": {
"production": {
"optimization": {
"styles": {
"inlineCritical": false
}
},
"budgets": [
{
"type": "initial",