[SAC] [OSGeo] #2427: issue with fonts showing on staging.grass.osgeo.org, allow origin update

[OSGeo]

#2427: issue with fonts showing on staging.grass.osgeo.org, allow origin update
---------------------------+---------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  reopened
 Priority:  normal         |   Milestone:  Sysadmin Contract 2020-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------

Comment (by mlennert):

 Replying to [comment:6 neteler]:
 > On the grasslxd server, in `/etc/apache2/sites-enabled/000-default.conf`
 there is already for a while:
 >
 > {{{
 > <VirtualHost *:80>
 > ...
 >         <FilesMatch ".(eot|ttf|otf|woff|woff2)">
 >         Header set Access-Control-Allow-Origin
 "https://staging.grass.osgeo.org"
 >         </FilesMatch>
 >
 >         # https://trac.osgeo.org/osgeo/ticket/2428#comment:3
 >         RemoteIPHeader X-Real-IP
 >         RemoteIPInternalProxy nginx.lxd
 >
 > </VirtualHost>
 > }}}
 >
 >
 > Shall I change that to the suggestion in comment:5 ?

 Yes, please. AFAIU, the

 {{{
 Header set Access-Control-Allow-Origin "https://staging.grass.osgeo.org"
 }}}

 limits the access to these fonts to requests coming from
 staging.grass.osgeo.org. However, we want access to be granted to all
 mirror sites as well. Using '*' is the easiest option. Another would be to
 gather all mirror site domains and list them explicitly. Don't know how
 feasible that would be.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2427#comment:7>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.