preload fonts, add csp

diff --git a/_includes/layouts/base.njk b/_includes/layouts/base.njk
index 56cbde27ed40c9404454da6669ee1726e3091f2d..cecc4b00c763db5fdaeeef5d1d88cc550da12c8b 100644 (file)
--- a/_includes/layouts/base.njk
+++ b/_includes/layouts/base.njk
@@ -8,6 +8,7 @@
     {%- endif %}
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self' 'unsafe-inline'; frame-src 'none'" />
     <meta name="title" property="og:title" content="{{ title }}" />
     <meta name="description" property="og:description" content="{{ description or metadata.description }}" />
     <meta name="author" content="{{ metadata.author.name }}" />
@@ -40,6 +41,10 @@
     <link rel="icon" type="image/x-icon" href="/favicon.ico" />
     <link rel="canonical" href="{{ metadata.base }}{{ page.url }}" />
     <link rel="alternate" href="/feed.xml" type="application/atom+xml" title="{{ metadata.title }}" />
+    <link rel="preload" href="/fonts/PublicSans-Bold.woff2" as="font" type="font/woff2" crossorigin />
+    <link rel="preload" href="/fonts/PublicSans-BoldItalic.woff2" as="font" type="font/woff2" crossorigin />
+    <link rel="preload" href="/fonts/PublicSans-Italic.woff2" as="font" type="font/woff2" crossorigin />
+    <link rel="preload" href="/fonts/PublicSans-Regular.woff2" as="font" type="font/woff2" crossorigin />
     {%- set css %}
         {% include "css/reset.css" %}
         {% include "css/style.css" %}