0fb507f247
Updated the Content-Security-Policy header to include Google Fonts and Google Analytics domains: - Added `https://www.gstatic.com` to `script-src`, `script-src-elem`, `img-src`, and `font-src` directives - Removed duplicate `script-src` and `style-src` entries in the policy - Ensured all relevant directives properly include the new domains