Dang! What browser are you using? I'm serving all of the fonts from my own domain, so CSP shouldn't be a problem. I don't understand where the URL <URL> is coming from. Could it be a browser extension of yours?
So I looked into it a bit more, the error is more defined as
I'm on Chrome 72.0.3626.96 (Official Build) (64-bit) for MacOs Mojave on a 15" Retina Macbook.
I went ahead and disabled my adblock and other extensions on the page but that did nothing. I also checked other sites to see if I see a similar error but its only on your site. :(
Woah this is crazy! What page are you on? As far as I know, I'm not base64'ing any fonts!
I'm just on slimvoice.co/
Dude this is crazy. If you can open devtools and nail down exactly which part of the HTML is doing that, I would be grateful. I have never heard this complaint before, nor have I seen it a console, nor am I aware of anywhere in the app that I have fonts specified as a base64 string. Absolutely the only thing I can think of is a browser extension adding this to the DOM.
It was a browser extension. Took a bit to find it as I'm an idiot. :P
Grammarly's browser extension was the culprit. Sorry to have sent you on a wild goose-chase! haha
About to say, I was having the same thing - The Base 64 decodes to the "Akkurat" font. Didn't have the error incognito though. Crazy!
Figured it out by switching to incognito mode actually. Newly added extensions aren't enabled in incognito by default and I never enabled it there so it makes sense that it would not interfere. :)
You can simply add "data:" to the relevant directive(s). That's what we do.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.