Browser keep stricter each days. Now, they insist on CORS. I can’t enable it in .htaccess, must do it in sites-enabled.
<IfModule mod_headers.c>
<FilesMatch "\.(ttf|ttc|otf|eot|woff|woff2|font.css|css|js)$">
Header set Access-Control-Allow-Origin "*"
</FilesMatch>
</IfModule>
