search

parkerbennett / stackicons

Icon font and Sass-based construction kit for Stackicons-Social, which supports multiple button shapes and a unique "multi-color" option in CSS for over 60 social brands.
MIT License
959 stars 117 forks source link

Website completely broken due to same-origin policy #1

Open poke opened 10 years ago

poke commented 10 years ago

Hey,

I was just linked to your website because of all those “pretty icons” and essentially saw nothing at all:

Screenshot

All the webfonts you are using are blocked because of Firefox’ same-origin policy which also applies to webfonts. You should either host the webfonts on the same domain, or enable cross-origin resource sharing on your CDN to fix this.

For completeness-sake, this is what Firefox tells me:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Branding.woff. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Branding.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-regular.woff. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-regular.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Social.woff. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Social.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-bold.woff. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-bold.woff
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Branding.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Branding.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-regular.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. RTRsans-regular.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/Stackicons/Stackicons-Social.ttf. This can be fixed by moving the resource to the same domain or enabling CORS. Stackicons-Social.ttf
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://stackicons.pixelsbrackets.netdna-cdn.com/fonts/RTRsans/RTRsans-bold.ttf. This can be fixed by moving the resource to the same domain or enabling CORS.