I have a webpage with http loaded content,
and this font page with https:
https://fonts.googleapis.com/css?family=Oswald:300,700,regular&subset=latin-ext
which I have embeded in the first page.
When I am loading the page, it’s displaying the error below:
has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space local.
Is there anything I can do about it on Apache ?
2
Answers
add header Access-Control-Allow-Private-Network
https://developer.chrome.com/blog/private-network-access-update/
With
CORS-rfc1918
, chrome will be mandating public websites accessing private content use HTTPS.FIX: You can either serve the content behind HTTPS, or else in your browser flags (eg
chrome://flags
) disableBlock insecure private network requests