除了字体之外的所有资源都加载得很好， 每当我访问我的网站时，我都会收到这样的消息：
访问字体： 'https://xxxxxxxxxx.cloudfront.net/assets/fontawesome-webfont.woff2 https://xxxxxxxxxx.cloudfront.net/assets/fontawesome-webfont.woff2' 从原点'https://example.com https://example.com' 已被 CORS 政策阻止：否 请求中存在“Access-Control-Allow-Origin”标头 资源。起源 'https://example.com https://example.com' 因此不允许 使用权。
正如您所看到的，CURL 命令指示不存在任何标头。
curl -H "Origin: https://example.com" -I https://xxxxxxxxx.cloudfront.net/assets/fontawesome-webfont.woff2
HTTP/1.1 200 OK
Content-Length: 77160
Connection: keep-alive
Status: 200 OK
X-Rack-Cache: stale, valid, store
Cache-Control: public, must-revalidate
Date: Fri, 14 Apr 2017 08:01:26 GMT
X-Content-Digest: d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
ETag: "2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe"
X-Runtime: 0.366713
X-Request-Id: 87c9d883-e443-4756-86f9-66b40ed573f6
X-Powered-By: Phusion Passenger Enterprise 5.1.2
Server: nginx/1.10.2 + Phusion Passenger 5.1.2
Via: 1.1 vegur, 1.1 f0eecbf6390179377707b707ebaa1e8b.cloudfront.net (CloudFront)
Age: 86645
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
X-Amz-Cf-Id: FNjQGvROcAdqT6u6PaN3OgEE34mnSsixHNm6WqzWq2boWWYYzVmZPw==
Here's AWS Origin configuration
这是包含上述起源的行为：
我什至包括机架科尔斯出于此目的，到项目内的初始化程序，但没有运气。
if defined? Rack::Cors
Rails.configuration.middleware.insert_before 0, Rack::Cors do
allow do
origins '*'
resource '/assets/*', headers: :any, methods: [:get, :post, :delete, :put, :patch, :options, :head], max_age: 0
end
end
end
为什么会这样？我该如何解决？先感谢您。
从 5.0 版本开始，Rails 允许为资产设置自定义 HTTP 标头 http://blog.bigbinary.com/2015/10/31/rails-5-allows-setting-custom-http-headers-for-assets.html并且您不必添加像这样的依赖项font_assets宝石。为了设置Access-Control-Allow-Origin到你的字体，只需添加以下代码即可config/environments/production.rb:
config.public_file_server.headers = {
'Access-Control-Allow-Origin' => '*'
}
更新于 07/25/2018:
标头值也可以是特定域，如下所示：
config.public_file_server.headers = {
'Access-Control-Allow-Origin' => 'https://www.example.org'
}