I have a webpage with http loaded content, and this font page with https:
https://fonts.googleapis.com/css?family=Oswald:300,700,regular&subset=latin-ext
which I have embeded in the first page.
When I am loading the page, it's displaying the error below:
has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space local.
Is there anything I can do about it on Apache ?
add header Access-Control-Allow-Private-Network
https://developer.chrome.com/blog/private-network-access-update/
With CORS-rfc1918, chrome will be mandating public websites accessing private content use HTTPS.
FIX: You can either serve the content behind HTTPS, or else in your browser flags (eg chrome://flags) disable Block insecure private network requests
block-insecure-private-network-requests: With this flag turned on, any requests to a private network resource from an HTTP website will be blocked.
