Fixed missing CSP directive and value

[BoGnY]

Changes in this pull request:

• Fixed CSP value that block Google Fonts and fonts loaded by (local) base64 code
• Added CSP directive to load manifest file (site.webmanifest)

@JC5

[coveralls]

Coverage increased (+0.006%) to 70.117% when pulling 59cfaa2 on BoGnY:fix/csp-directive into 4646422 on firefly-iii:develop.

[JC5]

Thanks for adding the manifest!

There should be no font-data coming from Google. Where did you run into it?

[BoGnY]

I'll investigate... I've read the CSP message error on Chrome console log 😅

EDIT:
This is my console log without font-src changes:

So adding data: fix the first error, but I can't find where is the code that load Google Fonts...
Need more investigation, I'm doing it 👍

[JC5]

There is no code in Firefly III that loads external fonts. I specifically programmed it to be that way. Are you running extra plugins or extensions?

[JC5]

I've merged this one, thanks!

[BoGnY]

@JC5 commented on #1963:

There is no code in Firefly III that loads external fonts. I specifically programmed it to be that way. Are you running extra plugins or extensions?

Yes, it's my fault.. I was writing 'EDIT 2' in my previous comment when you merged it, that extra fonts was loaded by an extension of my browser.. sorry 😄

[BoGnY]

@JC5 this PR fixes even #1725 because allows loading of web-manifest

[JC5]

Indeed!