Skip to content

CORS on WOFF files #143

@petecooper

Description

@petecooper

Current website is throwing an error on remote (textpattern.io) WOFFs:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://textpattern.io/assets/fonts/pt-serif-v9-latin-ext-700.woff2. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
downloadable font: download failed (font-family: "PT Serif" style:normal weight:bold stretch:normal src index:0): bad URI or cross-site access not allowed source: https://textpattern.io/assets/fonts/pt-serif-v9-latin-ext-700.woff2

This might be restricted to Tor browser as I use that a cache-busting tool. New site build-in-progress has allowances for remote fonts (see https://github.com/textpattern/server-config/blob/master/tractor.textpattern.com/etc/nginx/sites-available/www-dev.textpattern.com.conf#L179 for current incarnation), and yet it throws the same error.

screen shot 2018-08-29 at 19 54 05

Edit: most straightforward solution would be to live with this until www.textpattern.com testing on new server has concluded, and move the files into the www.textpattern.com directory tree rather than www.textpattern.io

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions