Bonjour ! J’ai une instance Discourse 3.5.0.beta3-dev sur https://wingsoffire.forum. L’instance est configurée sous le sous-domaine www, mais j’utilise la mise à plat CNAME de Cloudflare pour utiliser le domaine apex.
Tout fonctionne comme prévu, sauf que les polices ne peuvent pas être téléchargées. Cette erreur est affichée avec LibreWolf 137.0.1-1 :
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://wingsoffire.forum/fonts/Roboto-Bold.woff2?v=0.0.18. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘*, https://www.wingsoffire.forum, https://wingsoffire.forum’).
ndownloadable font: download failed (font-family: "Roboto" style:normal weight:700 stretch:100 src index:0): bad URI or cross-site access not allowed source: https://www.wingsoffire.forum/fonts/Roboto-Bold.woff2?v=0.0.18
Et sur la version stock d’Ungoogled Chromium 135.0.7049.84 :
Access to font at 'https://wingsoffire.forum/fonts/Roboto-Bold.woff2?v=0.0.18' (redirected from 'https://www.wingsoffire.forum/fonts/Roboto-Bold.woff2?v=0.0.18') from origin 'https://wingsoffire.forum' has been blocked by CORS policy: The 'Access-Control-Allow-Origin' header contains multiple values '*, https://www.wingsoffire.forum, https://wingsoffire.forum', but only one is allowed.
GET https://wingsoffire.forum/fonts/Roboto-Bold.woff2?v=0.0.18 net::ERR_FAILED 200 (OK)



