Nginx跨域使用字体文件的配置方法

ccess to Font at 'http://w001.static.akhack.com/css/KohinoorBangla-Regular.ttf' from origin 'http://carey.akhack.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://carey.akhack.com' is therefore not allowed access.

location ~* \.(eot|ttf|woff|svg|otf)$ {
        add_header Access-Control-Allow-Origin http://carey.akhack.com;
        add_header Access-Control-Allow-Headers X-Requested-With;
        add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
}

add_header Access-Control-Allow-Origin http://carey.akhack.com;
//只允许单域名或者 ‘*’ 。不推荐 ‘*’ ，会导致安全问题