restrict font-src to self