fix(Docker): allow Google Fonts for CSP

Fix #174

Author: sharevb

nginx.conf

@@ -11,7 +11,7 @@ server {
     add_header X-Permitted-Cross-Domain-Policies none;
     add_header Cross-Origin-Resource-Policy same-site;
     add_header Cross-Origin-Opener-Policy same-origin;
-    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: http:; connect-src data: blob: https: http:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self';";
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com; img-src 'self' data: blob: https: http:; connect-src data: blob: https: http:; font-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self';";
     location / {
         rewrite ^/it-tools/(.*) /$1 break;
         try_files $uri $uri/ /index.html;