Uploaded image for project: 'Jira Server and Data Center'
  1. Jira Server and Data Center
  2. JRASERVER-61400

CORS headers are missing in a font response

    XMLWordPrintable

    Details

      Description

      I'm developing a Jira gadget which is also available in Confluence. The gadget on the Confluence side works perfect except one thing: it could not load the font. The font response doesn't contain CORS headers, so there is the JS-error:

      Font from origin 'http://315-2x.docker1.almworks.com' has been blocked from loading by Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://conf576.docker1.almworks.com' is therefore not allowed access.
      

      The Access-Control-Allow-Origin header is only in REST responses, however Chrome and Firefox expect the headers for fonts as well

      Here is the response details:

      Request URL:http://315-2x.docker1.almworks.com/s/en_USiwoz3r/6346/2/3.0.2.jira6/_/download/resources/com.almworks.jira.structure:fonts/fonts/fontawesome-webfont.woff2?v=4.4.0
      Request Method:GET
      Status Code:200 OK
      Remote Address:192.168.11.19:80
      
      Response Headers
      view source
      Cache-Control:max-age=31536000
      Cache-Control:public
      Connection:Keep-Alive
      Content-Type:application/octet-stream;charset=UTF-8
      Date:Fri, 10 Jun 2016 11:50:58 GMT
      ETag:"1465555713000"
      Expires:Sat, 10 Jun 2017 11:50:59 GMT
      Keep-Alive:timeout=5, max=99
      Last-Modified:Fri, 10 Jun 2016 10:48:33 GMT
      Server:Apache-Coyote/1.1
      Transfer-Encoding:chunked
      X-AREQUESTID:710x2581x1
      X-ASEN:SEN-L6853581
      X-Content-Type-Options:nosniff
      
      Request Headers
      view source
      Accept:*/*
      Accept-Encoding:gzip, deflate, sdch
      Accept-Language:en-US,en;q=0.8
      Cache-Control:max-age=0
      Connection:keep-alive
      Host:315-2x.docker1.almworks.com
      Origin:http://conf576.docker1.almworks.com
      Referer:http://315-2x.docker1.almworks.com/s/d41d8cd98f00b204e9800998ecf8427e-CDN/en_USiwoz3r/6346/2/3.0.2.jira6/_/download/batch/com.almworks.jira.structure:fonts/com.almworks.jira.structure:fonts.css
      User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
      
      Query String Parameters
      view source
      view URL encoded
      v:4.4.0
      

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            ivkin Alexander Ivkin
            Votes:
            25 Vote for this issue
            Watchers:
            25 Start watching this issue

              Dates

              Created:
              Updated: