Aligning with the specification (and other browsers) and blocking cross origin font loading, unless the response include the appropriate CORS headers.

Specification

Established standard

Status in Chromium

Blink


Enabled by default (tracking bug) in:

  • Chrome for desktop release 37
  • Chrome for Android release 37

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

Owner

Comments

Microsoft removed CORS restriction on Mobile IE due to site compatibility: https://blogs.windows.com/msedgedev/2015/06/17/building-a-more-interoperable-web-with-microsoft-edge/#div-comment-1453

Search tags

same origin, cross origin, woff, font,

Last updated on 2020-11-19