title: Chrome Throwing Content Security Policy Error on Google Fonts
body: <p>I've added the Google fonts URL to the font-src directive of my Content-Security-Policy header. I'm getting the following error in Chrome 42:</p>
  
  <pre><code>Refused to load the stylesheet 'http://fonts.googleapis.com/css?
  family=Open+Sans:300,400,400italic,600,800|Source+Code+Pro' because it violates the
  following Content Security Policy directive: "style-src 'self' 'unsafe-inline'".
  </code></pre>
  
  <p>My header field looks like this:</p>
  
  <pre><code>Content-Security-Policy: default-src 'self'; font-src http://fonts.googleapis.com;
  style-src 'self' 'unsafe-inline'
  </code></pre>