Access to font file via HTTP URL not permitted from same domain HTTPS CSS file.

RESOLVED INVALID

Status

()

RESOLVED INVALID
6 years ago
6 years ago

People

(Reporter: nagle, Unassigned)

Tracking

14 Branch
x86_64
Windows 7
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

6 years ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0
Build ID: 20120612164001

Steps to reproduce:

Viewed a site which has a CSS file under a "https" URL. The CSS file references a font file from the same domain, but under a "http" URL. 


Actual results:

Treated as a cross-site access error:

[code]
Timestamp: 6/20/2012 7:36:52 PM
Error: downloadable font: download failed (font-family: "JaneAusten" style:normal weight:normal stretch:normal src index:1): bad URI or cross-site access not allowed
source: http://brassgoggles.co.uk/fonts/JaneAusten.woff
Source File: https://brassgoggles.co.uk/blog/wp-content/themes/brasscasing/style.css
Line: 0
Source Code:
@font-face {   font-family: "JaneAusten";   font-style: normal;   font-weight: normal;   src: local("JaneAusten"), url("http://brassgoggles.co.uk/fonts/JaneAusten.woff") format("woff"); }
[/code]


Expected results:

Font should have loaded.

May be related to https://bugzilla.mozilla.org/show_bug.cgi?id=555077
" Cross-Site @font-face embedding with cross-site CSS possible with base64, impossible with own file"

Comment 1

6 years ago
Same domain includes (1)protocol, (2)fqdn and (3)port

http and https breaks 1 and 3, and for that reason technically seen as a different domain.

The urls you have there could be converted to:

brassgoggles.co.uk:443/blog/wp-content/themes/brasscasing/style.css
brassgoggles.co.uk:80/fonts/JaneAusten.woff

and as ports can point to different servers, that's why its seen as different domains.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.