Access to font at [same domain as origin minus www.] has been blocked by CORS policy

[jose.guedes.translat]

Hello!

My website is throwing the following error:

“Access to font at https://gxbeachtennis.com.br/wp-content/uploads/2023/01/OpenSans-Bold.ttf from origin https://www.gxbeachtennis.com.br has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.”.

As you can see, they actually are the same domain minus the “www.”. I contacted my hosting provider but they said it was Cloudfare. They provided the following message with details about my settings:

https://justpaste.it/9ziys

These are my DNS entries:

I apologize for the trouble and would really appreciate it if anyone could help me out.

Thanks a lot!

[matteo]

CORS policy is set by the web server and, given the cache status says DYNAMIC it’s looking like Cloudflare isn’t actively caching it.

This is something that the host/web devs need to fix.

They could just make sure to use the same domain…

[jose.guedes.translat]

Thank you very much for replying matteo! I think my hosting provider is just lazy. I managed to use a relative URL for the fonts, however, which fixed the problem. Thank you very much once more and have a great week ahead!