fix: load Google Fonts correctly with strict CSP #77

Merged
naomi merged 1 commits from chore/font into main 2026-03-05 10:32:20 -08:00

1 Commits

Author SHA1 Message Date
hikari 3b3ac3d1ef fix: load Google Fonts correctly with strict CSP
Node.js CI / CI (pull_request) Successful in 1m37s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m41s
- Allow fonts.googleapis.com in style-src and fonts.gstatic.com in font-src
- Add Google Fonts preconnect links and import (Griffy, Kalam, Creepster, Henny Penny)
- Set body font to Kalam and heading font to Griffy
- Disable Angular inlineCritical optimisation to prevent deferred CSS loading via onload attribute, which was blocked by the strict script-src CSP
2026-03-05 10:26:31 -08:00