Uploaded image for project: 'Red Hat 3scale API Management'
  1. Red Hat 3scale API Management
  2. THREESCALE-7515

Stop serving font assets CORS headers from rails

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • 2.11.0 CR1
    • System
    • None
    • False
    • False
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Yes

      Currently we use a CDN to distribute font assets in SaaS which means they are downloaded from another domain. This requires setting permissive CORS headers when serving them for the browsers to accept them.

      To avoid unnecessary complexity in project code and handle assets serving CORS configuration at the same place where assets serving is configured (on the CDN side), we would like to stop serving CORS headers from Rails side.

      To set these headers, we use `font_assets` gem which is obsolete since many years. It will simplify our project maintenance and compatibility if we remove this gem and stop supporting this function.

      When using CloudFront, a possible implementation would be using functions.

      We would need to document this change for customers using CDN like we are using. At the moment changing `asset_host` when deploying system is not supported. Still there might be customers that found a way to use it. If we stop serving the headers from Rails, they would need to add this functionality to their own CDN setup when upgrading.

              Unassigned Unassigned
              akostadi1@redhat.com Aleksandar Kostadinov
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: