Re: [sysreq #12077] CORS headers needed for MathJax fonts, allowing access from

On 22-Sep-17 08:15, José Kahan via RT wrote:
> Fixed.
>
> We had this issue because the mime type for woff fonts changed and we hadn't updated that part in our server config.
Yes, it changed to font/woff because of RFC 8081, which I wrote :)
>   All woff fonts had the cors header and now they have it again.
>
> For Bert, using '*' is enough for this case.

Thanks!!


>
> -j
>
> On Thu Sep 21 18:56:24 2017, chris wrote:
>> Hi sysreq,
>>
>> (Bert copied as maintainer of the W3C MathJax instance, WG copied
>> because of issue 1329 )
>> https://github.com/WebAudio/web-audio-api/issues/1329
>>
>> The Web Audio spec uses MathJax. The editors draft, at
>> https://webaudio.github.io/web-audio-api/ gives browser console errors
>> because of the cross origin font request (which is correct, per spec)
>> and so I am asking for an Access-Control-Allow-Origin header to be
>> added, enabling webaudio.github.io.
>>
>> Here is a sample error (similar ones for the other fonts)
>>
>> Cross-Origin Request Blocked: The Same Origin Policy disallows reading
>> the remote resource at
>> https://www.w3.org/scripts/MathJax/2.6.1/fonts/HTML-
>> CSS/TeX/woff/MathJax_Size4-Regular.woff?rev=2.6.1.
>> (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
>>
>> which leads to
>>
>> downloadable font: download failed (font-family: "MathJax_Size4"
>> style:normal weight:normal stretch:normal src index:0): bad URI or
>> cross-site access not allowed source:
>> https://www.w3.org/scripts/MathJax/2.6.1/fonts/HTML-
>> CSS/TeX/woff/MathJax_Size4-Regular.woff?rev=2.6.1
>>
>> There is documentation here on adding CORS headers
>> https://www.w3.org/wiki/CORS_Enabled
>> https://www.webcodegeeks.com/web-servers/cors-and-how-to-enable-it-in-
>> apache-web-server/
>> https://enable-cors.org/server_apache.html
>>
>> Thanks!
>
>
-- 
Chris Lilley
@svgeesus
Technical Director @ W3C
W3C Strategy Team, Core Web Design
W3C Architecture & Technology Team, Core Web & Media

Received on Sunday, 24 September 2017 03:01:43 UTC