Uploaded image for project: 'Jira Server and Data Center'
  1. Jira Server and Data Center
  2. JRASERVER-61400

CORS headers are missing in a font response

    XMLWordPrintable

Details

    Description

      I'm developing a Jira gadget which is also available in Confluence. The gadget on the Confluence side works perfect except one thing: it could not load the font. The font response doesn't contain CORS headers, so there is the JS-error:

      Font from origin 'http://315-2x.docker1.almworks.com' has been blocked from loading by Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://conf576.docker1.almworks.com' is therefore not allowed access.

      The Access-Control-Allow-Origin header is only in REST responses, however Chrome and Firefox expect the headers for fonts as well

      Here is the response details:

      Request URL:http://315-2x.docker1.almworks.com/s/en_USiwoz3r/6346/2/3.0.2.jira6/_/download/resources/com.almworks.jira.structure:fonts/fonts/fontawesome-webfont.woff2?v=4.4.0
Request Method:GET
Status Code:200 OK
Remote Address:192.168.11.19:80

Response Headers
view source
Cache-Control:max-age=31536000
Cache-Control:public
Connection:Keep-Alive
Content-Type:application/octet-stream;charset=UTF-8
Date:Fri, 10 Jun 2016 11:50:58 GMT
ETag:"1465555713000"
Expires:Sat, 10 Jun 2017 11:50:59 GMT
Keep-Alive:timeout=5, max=99
Last-Modified:Fri, 10 Jun 2016 10:48:33 GMT
Server:Apache-Coyote/1.1
Transfer-Encoding:chunked
X-AREQUESTID:710x2581x1
X-ASEN:SEN-L6853581
X-Content-Type-Options:nosniff

Request Headers
view source
Accept:*/*
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8
Cache-Control:max-age=0
Connection:keep-alive
Host:315-2x.docker1.almworks.com
Origin:http://conf576.docker1.almworks.com
Referer:http://315-2x.docker1.almworks.com/s/d41d8cd98f00b204e9800998ecf8427e-CDN/en_USiwoz3r/6346/2/3.0.2.jira6/_/download/batch/com.almworks.jira.structure:fonts/com.almworks.jira.structure:fonts.css
User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

Query String Parameters
view source
view URL encoded
v:4.4.0

      Attachments

        Activity

          People

            Unassigned Unassigned
            7a979cf5d5eb Alexander Ivkin
            Votes:
            29 Vote for this issue
            Watchers:
            27 Start watching this issue

            Dates

              Created:
              Updated: