I had a similar problem: my scripts are served by a subdomain and fall under the same restriction. However, I solved this:
1) adding each script tag as follows:
<script type="text/javascript" src="http://subdomain.mydomain.tld" crossorigin="*.mydomain.tld" />
2) by modifying apache httpd.conf, adding the following inside each vhost (you should enbable mod_headers):
<IfModule mod_headers.c> Header add Access-Control-Allow-Origin "*.mydomain.tld" </IfModule>
On one of my servers I was not able to execute this functionality, except for the replacement
*.mydomain.tld
by
*
Be aware of the drawbacks that potentially allow * the dissemination of information about the fish. Documentation about CORS, same origin, img and fonts, cdn is available, but less is available about crossorigin script tags.
Hope this helps ...
source share