use https in font links or at lease use protocol relative links

in the file google-font.json the request use http. In a site that uses https (like ours), this is loaded as insecure ( and could be even blocked ).

to avoid this, the best way is to move to https, or, you can remove the protocol.
Both solutions will work that would work for both http and https sites.