In the config file, you will find a route:after hook that sets CSP header, you would have to adapt those for fonts