[freeze break request] Enable CORS for webfont files