fix: add fonts directive to csp for fundraiser (#19167)

Refs: #19120

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

Author: miketheman

tests/unit/test_csp.py

@@ -249,7 +249,11 @@ def test_includeme():
                         "https://2p66nmmycsj3.statuspage.io",
                     ],
                     "default-src": ["'none'"],
-                    "font-src": ["'self'", "fonts.gstatic.com"],
+                    "font-src": [
+                        "'self'",
+                        "fonts.gstatic.com",
+                        "https://fonts.cdnfonts.com",
+                    ],
                     "form-action": [
                         "'self'",
                         "https://checkout.stripe.com",
@@ -280,6 +284,7 @@ def test_includeme():
                         "fonts.googleapis.com",
                         "*.ethicalads.io",
                         "donate.python.org",
+                        "https://fonts.cdnfonts.com",
                         "'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM='",
                         "'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",
                         "'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE='",

warehouse/csp.py

@@ -155,7 +155,7 @@ def includeme(config):
                 "base-uri": [SELF],
                 "connect-src": _connect_src_settings(config),
                 "default-src": [NONE],
-                "font-src": [SELF, "fonts.gstatic.com"],
+                "font-src": [SELF, "fonts.gstatic.com", "https://fonts.cdnfonts.com"],
                 "form-action": [
                     SELF,
                     "https://checkout.stripe.com",
@@ -176,6 +176,7 @@ def includeme(config):
                     "fonts.googleapis.com",
                     "*.ethicalads.io",
                     "donate.python.org",
+                    "https://fonts.cdnfonts.com",
                     # Hashes for inline styles generated by v1.4.0 of ethicalads.min.js
                     "'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM='",
                     "'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='",