fix(proxy): update tests and example configs for font-src data: CSP change

Update acceptance tests and all deployment example CSP configs to include
'data:' in font-src, consistent with the default csp.yaml change.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

deployments/examples/ocis_full/config/ocis/csp.yaml

@@ -13,6 +13,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''self'''
   frame-src:

deployments/examples/ocis_keycloak/config/ocis/csp.yaml

@@ -11,6 +11,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''none'''
   frame-src:

deployments/examples/ocis_multi/config/ocis/csp-ocm.yaml

@@ -10,6 +10,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''self'''
   frame-src:

deployments/examples/ocis_multi/config/ocis/csp.yaml

@@ -11,6 +11,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''none'''
   frame-src:

deployments/examples/ocis_ocm/config/ocis/csp-ocm-next.yaml

@@ -9,6 +9,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''self'''
   frame-src:

deployments/examples/ocis_ocm/config/ocis/csp-ocm.yaml

@@ -9,6 +9,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''self'''
   frame-src:

deployments/examples/ocis_ocm/config/ocis/csp.yaml

@@ -9,6 +9,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''self'''
   frame-src:

tests/acceptance/features/coreApiWebdavOperations/downloadFile.feature

@@ -219,7 +219,7 @@ Feature: download file
     And the following headers should be set
       | header                            | value                                                                                                                                                                                                                                                                                                                                                                                                                                    |
       | Content-Disposition               | attachment; filename*=UTF-8''<encoded-file-name>; filename="<file-name>"                                                                                                                                                                                                                                                                                                                                                                 |
-      | Content-Security-Policy           | child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; default-src 'none'; font-src 'self'; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/; img-src 'self' data: blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' |
+      | Content-Security-Policy           | child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; default-src 'none'; font-src 'self' data:; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/; img-src 'self' data: blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' |
       | X-Content-Type-Options            | nosniff                                                                                                                                                                                                                                                                                                                                                                                                                                  |
       | X-Frame-Options                   | SAMEORIGIN                                                                                                                                                                                                                                                                                                                                                                                                                               |
       | X-Permitted-Cross-Domain-Policies | none                                                                                                                                                                                                                                                                                                                                                                                                                                     |
@@ -246,7 +246,7 @@ Feature: download file
     And the following headers should be set
       | header                            | value                                                                                                                                                                                                                                                                                                                                                                                                                                    |
       | Content-Disposition               | attachment; filename*=UTF-8''%22quote%22double%22.txt; filename=""quote"double".txt"                                                                                                                                                                                                                                                                                                                                                     |
-      | Content-Security-Policy           | child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; default-src 'none'; font-src 'self'; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/; img-src 'self' data: blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' |
+      | Content-Security-Policy           | child-src 'self'; connect-src 'self' blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; default-src 'none'; font-src 'self' data:; frame-ancestors 'self'; frame-src 'self' blob: https://embed.diagrams.net/; img-src 'self' data: blob: https://raw.githubusercontent.com/owncloud/awesome-ocis/; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' |
       | X-Content-Type-Options            | nosniff                                                                                                                                                                                                                                                                                                                                                                                                                                  |
       | X-Frame-Options                   | SAMEORIGIN                                                                                                                                                                                                                                                                                                                                                                                                                               |
       | X-Permitted-Cross-Domain-Policies | none                                                                                                                                                                                                                                                                                                                                                                                                                                     |

tests/config/drone/csp.yaml

@@ -11,6 +11,7 @@ directives:
     - '''none'''
   font-src:
     - '''self'''
+    - 'data:'
   frame-ancestors:
     - '''none'''
   frame-src: