title: How can I fix the 'Missing Cross-Origin Resource Sharing (CORS) Response Header' webfont issue?
body: <p>For some reason fonts have stopped rendering on my sites. The fonts are stored locally, on the same server as the site.</p>
  
  <p>I looked up the problem and it seems to be a <code>Missing Cross-Origin Resource Sharing (CORS) Response Header</code> but I cannot understand the solution for this.</p>
  
  <p>All the various sites say to do is to use: <code>Access-Control-Allow-Origin:*</code></p>
  
  <p>But as I'm primarily front end I do not know where to put it. Is this something my host can help with?</p>
  
  <p>What can I do to fix the issue?</p>
  
  <p>EDIT:</p>
  
  <p>the site in question is: <a href="http://cyclistinsuranceaustralia.com.au/">http://cyclistinsuranceaustralia.com.au/</a></p>
  
  <p>The phone number, for example, at the top right should be Bebas font but it is defaulting to Impact.</p>
  
  <p>In the console, I get the errors:</p>
  
  <blockquote>
    <p>Font from origin '<a href="http://www.cyclistinsuranceaustralia.com.au">http://www.cyclistinsuranceaustralia.com.au</a>' has been blocked from loading by Cross-Origin Resource Sharing policy: The 'Access-Control-Allow-Origin' header has a value '<a href="http://www.cyclistinsuranceaustralia.com.au">http://www.cyclistinsuranceaustralia.com.au</a>' that is not equal to the supplied origin. Origin '<a href="http://cyclistinsuranceaustralia.com.au">http://cyclistinsuranceaustralia.com.au</a>' is therefore not allowed access.</p>
  </blockquote>
  
  <p>I contact my host who said to put:</p>
  
  <pre><code>Access-Control-Allow-Origin "http://www.cyclistinsuranceaustralia.com.au"
  </code></pre>
  
  <p>in my .htaccess file but this has no change.</p>