- Added fonts.gstatic.com to font-src for Google Fonts
- Added fonts.googleapis.com to script-src and style-src for Google Fonts API
- Expanded img-src to allow all HTTPS images
- CSP now properly allows all required resources for RDP functionality