
13 Aug
2019
13 Aug
'19
6:59 p.m.
On Tue, 13 Aug 2019 14:32:00 +0200, Ján Máté <jan.mate@inf-it.com> wrote:
it cannot be CORS because fonts are included in the client itself (not loaded remotely). I also tested the latest Chrome beta (on Mac) and everything looks OK. Maybe you have a plugin installed or something similar ...
This is what Firefox says: In response to CVE-2019-11730, Firefox 68 and later define the origin of a page opened using a file:/// URI as unique. Therefore, other resources in the same directory or its subdirectories no longer satisfy the CORS same-origin rule. Fortunately: This new behavior is enabled by default using the privacy.file_unique_origin preference. By disabling this behaviour the fonts load again. -- Johan