title: Cross-Origin request warning for google fonts
body: <p>I am using Google Webfonts on my website. In the console on Chrome I get the following warning:</p>
  
  <blockquote>
    <p>Blink is considering rejecting non spec-compliant cross-origin web
    font requests:
    <a href="http://fonts.gstatic.com/s/raleway/v8/0dTEPzkLWceF7z0koJaX1A.woff2">http://fonts.gstatic.com/s/raleway/v8/0dTEPzkLWceF7z0koJaX1A.woff2</a>.
    Please use Access-Control-Allow-Origin to make these requests
    spec-compliant.</p>
  </blockquote>
  
  <p>Upon inspecting the request headers there appears to not be any Access-Control headers present:</p>
  
  <pre><code>Remote Address:109.231.231.219:80
  Request URL:http://fonts.gstatic.com/s/raleway/v8/0dTEPzkLWceF7z0koJaX1A.woff2
  Request Method:GET
  Status Code:304 Not Modified
  Request Headersview source
  Accept:*/*
  Accept-Encoding:gzip,deflate,sdch
  Accept-Language:en-US,en;q=0.8,en-GB;q=0.6
  Cache-Control:max-age=0
  Connection:keep-alive
  DNT:1
  Host:fonts.gstatic.com
  If-Modified-Since:Mon, 04 Aug 2014 17:04:46 GMT
  Origin:http://samarkanddesign.com
  Referer:http://samarkanddesign.com/
  User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36
  Response Headersview source
  Age:369865
  Date:Fri, 08 Aug 2014 02:01:39 GMT
  Expires:Sat, 08 Aug 2015 02:01:39 GMT
  Server:GFE/2.0
  </code></pre>
  
  <p>What can I do to solve this? Can anyone explain what's going on as I don't fully understand CORS. The page when viewed in firefox and IE seems to block the font request.</p>
  
  <p>One thing to note is that I'm viewing the site on my company network. It might have a strange setting or proxy that strips out Access-Control headers. Can anyone one a normal connection verify the headers are usually present? The page is at <a href="http://samarkanddesign.com">http://samarkanddesign.com</a></p>