title: Brave: On <!DOCTYPE html>, Refused to load the font 'data:application/font-woff…' because it violates the following Content Security Policy directive…
body: <p>The website works fine on all other browsers I've tested it on.
  On the Brave browser, an error occurs for line 1 of my index.html file (Which is <code>&lt;!DOCTYPE html&gt;</code>):</p>
  <p><code>Refused to load the font 'data:application/font-woff...' because it violates the following Content Security Policy directive: &quot;default-src 'self' *.favicon.cc *.google.com *.gstatic.com *.googleapis.com&quot;. Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.</code></p>
  <p>Line 6 of my index.html is this: <code>&lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;font-src 'self' data:; default-src 'self' data: blob: 'unsafe-inline';&quot;&gt;</code>.</p>
  <p>For some reason, this error only occurs on this .co domain, but when I host the same HTML file on other TLDs (I've tested: .ml, .gq, .dev) it works with no issue, using the CSP I set in the header.</p>
  <p>Is there any way to get Brave to use the CSP I set in the file instead of the one Brave uses?
  I've tried using it as an actual HTTP header, no change.</p>
  <p>Edit for additional context: The entire page breaks as if the CSP is set to &quot;default-src 'self' *.favicon.cc *.google.com *.gstatic.com *.googleapis.com&quot; and other page elements do not load properly.</p>