MERX CSP and the MERX starter kit

[oyster]

Bingo… I’ll leave this up. The solution is found here.

Content Security Policy error (using Merx Starterkit)

In the config file, you will find a route:after hook that sets CSP header, you would have to adapt those for fonts