I noticed that typeface are always subject to Cross-Origin Resource Sharing(CORS) and the images are not.
SCENARIO
Website A: On this website, we have a limitation on uploading resources. We can only upload HTML file. All external files are pointing to Website B.
Website B: All resources are uploaded to this website.
Image are okay and working fine but the fonts are not. Below is an example of an error log. I'm curious if is it always like that? like fonts are always subject to CORS and images are not?
Access to Font at 'website-b.com/font.ttf?' from origin 'website-a.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'website-a.com' is therefore not allowed access.
QUESTIONS
- Is typeface always subject to CORS policy and why?
- Why are images not subject to CORS policy?
- If the typeface is subject to CORS, how is it differs from the image in terms of CORS?