CSP : allow fonts from anywhere
Merging origin/jtroup/master-pending-cspFontFix into master