I've a landing page in which if I don't use content security policy, it loads everything (see the ones in blue) and when below CSP code is added, it doesn't load the 'font' content. Note that I've added 'data:' in font.

Any thoughts or help is highly appreciated.

<script> Platform.Response.SetResponseHeader("Content-Security-Policy","default-src 'self' *.collect.igodigital.com; font-src 'self' data: ;script-src 'self' ;img-src 'self';"); </script>

@font-face {
    font-family: 'Expert Sans Light';
    src: url(data:application/font-woff2;charset=utf-8;base64,d09GMgABAAAAAD9YABAAAAAAnKgAAD70AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0ZGVE0cGh4GVgCDUgg2CYRlEQgKgpQggfISC4NSAAE2AiQDhyAEIAWF.........


CSP not letting font data to be loaded

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.