10.2.9: #320

Framework/etc/csp_whitelist.xml

@@ -1,16 +1,26 @@
 <?xml version='1.0' encoding='UTF-8'?>
+<!-- 2023-08-05 -->
+<csp_whitelist
+	xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' 
+	xsi:noNamespaceSchemaLocation='urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd'
+>
+	<policies>
+<!-- 2023-08-05
+«Refused to load the font 'https://maxcdn.bootstrapcdn.com/font-awesome/latest/fonts/fontawesome-webfont.woff2?v=4.7.0'
+because it violates the following Content Security Policy directive:
+"font-src fonts.gstatic.com data: 'self' 'unsafe-inline'"»: https://github.com/mage2pro/core/issues/320 -->
+		<policy id='font-src'>
+			<values>
+				<value id='bootstrapCdn' type='host'>*.bootstrapcdn.com</value>
+			</values>
+		</policy>
 <!-- 2023-08-05
 1) «Refused to load the stylesheet 'https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css'
 because it violates the following Content Security Policy directive:
 "style-src *.adobe.com *.aptrinsic.com fonts.googleapis.com 'self' 'unsafe-inline'".
 Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.»:
 https://github.com/mage2pro/core/issues/319
 2) https://magento.stackexchange.com/a/312254 -->
-<csp_whitelist
-	xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' 
-	xsi:noNamespaceSchemaLocation='urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd'
->
-	<policies>
 		<policy id='style-src'>
 			<values>
 				<value id='bootstrapCdn' type='host'>*.bootstrapcdn.com</value>

composer.json

@@ -1,6 +1,6 @@
 {
 	"name": "mage2pro/core"
-	,"version": "10.2.8"
+	,"version": "10.2.9"
 	,"description": "Mage2.PRO core package."
 	,"type": "magento2-module"
 	,"homepage": "https://mage2.pro"