Apply content-security-policy to the HTML options page. This is a

chrome/browser/resources/shared/js/options/font_settings.js

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 cr.define('options', function() {
 
   var OptionsPage = options.OptionsPage;
 
   /**
    * FontSettings class
@@ skipping 189 matching lines @@
     FontSettings.getInstance().setUpFontSample_($('minimum-font-sample'), size,
                                                 null, true);
   };
 
   // Export
   return {
     FontSettings: FontSettings
   };
 });