Final config

Author: vmcj

webapp/src/EventListener/AddContentSecurityPolicyListener.php

@@ -17,7 +17,7 @@ public function __invoke(ResponseEvent $event): void
         // the profiler requires 'unsafe-eval' for script-src 'self'.
         $response = $event->getResponse();
         $cspExtra = $this->profiler ? "'unsafe-eval'" : "";
-        $csp = "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:";
+        $csp = "font-src 'self' data:; default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' $cspExtra; img-src 'self' data:; worker-src 'self' blob:";
         $response->headers->set('Content-Security-Policy', $csp);
     }
 }

webapp/templates/base.html.twig

@@ -15,8 +15,19 @@
     <script src="{{ asset("js/bootstrap.bundle.min.js") }}"></script>
     <script>
         window.MathJax = {
-          tex: { inlineMath: [['$', '$'], ['\\(', '\\)']] },
-          chtml: { fontURL: "{{ app.request.basePath }}/mathjaxfonts" }
+            tex: {
+                inlineMath: [['$', '$'], ['\\(', '\\)']]
+            },
+            chtml: {
+                fontURL: "{{ app.request.basePath }}/mathjaxfonts",
+                scale: 1.0
+            },
+            loader: {
+                paths: {
+                    mathjax: "{{ app.request.basePath }}/mathjax"
+                },
+                load: ['input/tex', 'output/chtml']
+            }
         };
     </script>
     <script src="{{ app.request.basePath }}/mathjax/tex-chtml.js"></script>