title: "[Report Only] Refused to load the font..." error message on console
body: <p>More specifically:</p>
  
  <pre><code>[Report Only] Refused to load the font 'data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAABBQAAoAAAAAG…H8zVsjnmMx0GcZ2HGViNOySWEa9fvEQtW43Nm+EOO0ZIpdLbMXoVzPJkcfHT6U+gLEpz/MAAAA' because it violates the following Content Security Policy directive: "font-src 'self'".
  </code></pre>
  
  <p>this is my <code>contentSecurityPolicy</code> object at <code>environment.js</code>:</p>
  
  <pre><code>contentSecurityPolicy: {
    'default-src': "'none'",
    'script-src': "'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net",
    'connect-src': "'self'",
    'img-src': "'self' www.facebook.com",
    'style-src': "'self' 'unsafe-inline'",
    'frame-src': "s-static.ak.facebook.com static.ak.facebook.com www.facebook.com",
    'report-uri': "http://localhost:4200"
  },
  </code></pre>
  
  <p>Is there anything wrong?</p>