diff --git a/reports/jinja2/generics/table.jinja b/reports/jinja2/generics/table.jinja
index dddd05d1c..333781c90 100644
--- a/reports/jinja2/generics/table.jinja
+++ b/reports/jinja2/generics/table.jinja
@@ -1,5 +1,5 @@
 {% from "components/table/macro.njk" import govukTable -%}
-{% if report.headers_list -%} 
+{% if report.headers_list -%}
 <script nonce="{{ request.csp_nonce }}" src="{{ static('common/js/ag-grid-community.min.js') }}" async></script>
 <script nonce="{{ request.csp_nonce }}">
     document.addEventListener('DOMContentLoaded', function () {
diff --git a/settings/common.py b/settings/common.py
index 8203950f0..0eb791c21 100644
--- a/settings/common.py
+++ b/settings/common.py
@@ -218,7 +218,7 @@
     "https://www.googletagmanager.com/",
     "ajax.googleapis.com/",
 )
-CSP_FONT_SRC = ("'self'", "'unsafe-inline'")
+CSP_FONT_SRC = ("'self'", "'unsafe-inline'", "data:")
 CSP_INCLUDE_NONCE_IN = ("script-src",)
 CSP_REPORT_ONLY = False