nhcarrigan/library
9
0
Fork 0
generated from nhcarrigan/template
Code Issues Pull Requests 54 Actions Releases 3 Activity

fix: load Google Fonts correctly with strict CSP #77

Merged
naomi merged 1 commits from chore/font into main 2026-03-05 10:32:20 -08:00
Conversation 0 Commits 1 Files Changed 4
+32 -3

1 Commits

Author SHA1 Message Date
hikari 3b3ac3d1ef fix: load Google Fonts correctly with strict CSP
Node.js CI / CI (pull_request) Successful in 1m37s
Details
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m41s
Details 
- Allow fonts.googleapis.com in style-src and fonts.gstatic.com in font-src
- Add Google Fonts preconnect links and import (Griffy, Kalam, Creepster, Henny Penny)
- Set body font to Kalam and heading font to Griffy
- Disable Angular inlineCritical optimisation to prevent deferred CSS loading via onload attribute, which was blocked by the strict script-src CSP
 2026-03-05 10:26:31 -08:00