Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Website completely broken due to same-origin policy #1

Open
poke opened this issue Feb 20, 2014 · 0 comments
Open

Website completely broken due to same-origin policy #1

poke opened this issue Feb 20, 2014 · 0 comments

Comments

@poke
Copy link

poke commented Feb 20, 2014

Hey,

I was just linked to your website because of all those “pretty icons” and essentially saw nothing at all:

Screenshot

All the webfonts you are using are blocked because of Firefox’ same-origin policy which also applies to webfonts. You should either host the webfonts on the same domain, or enable cross-origin resource sharing on your CDN to fix this.

For completeness-sake, this is what Firefox tells me:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Branding.woff. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Branding.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-regular.woff. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-regular.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Social.woff. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Social.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-bold.woff. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-bold.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Branding.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Branding.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-regular.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-regular.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Social.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Social.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-bold.ttf. This can be fixed by moving the resource to the same domain or enabling CORS.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant