I am trying to load an object (font) from an s3 bucket. Fonts in Firefox and IE must have Access-Control-Allow-Origin header headers returned in response. Unfortunately, it looks like Chrome is not sending the "Origin" request header. Because it does not send an Origin request header, CORS S3 does not return the required Access-Control-Allow-Origin header.
Here is an example of a request taken from the Chrome Inspector panel:
Why is there no โOriginโ heading in Requset headers ?!

The page specifying this font request is located at https://proximate.com and is hosted on Heroku.
source share