Adjust CSP so it meets Angular's minimum requirements
Whitelist domains related to Google fonts
Fix malformed Permission-Policy header (the default one mistakenly has a semicolon in it instead of a comma)
I'm not sure why, but all these issues seemed to crop up in Chromium, but not in Firefox. I didn't check if Angular even uses inline styles on Firefox like it does on Chromium. No idea why it let Google domains through.
I'm not sure why, but all these issues seemed to crop up in Chromium, but not in Firefox. I didn't check if Angular even uses inline styles on Firefox like it does on Chromium. No idea why it let Google domains through.