# Only allow direct access to specific Web-available files. # Allow access from all domains for webfonts. Header set Access-Control-Allow-Origin "*"