title: Why is this simple CORS GET failing?
body: <p>I have a server running apache. The .htaccess contains the following:</p>
  
  <pre><code>&lt;IfModule mod_headers.c&gt;
    &lt;FilesMatch "\.(eot|ttf|otf|woff|css)$"&gt;
      Header add Access-Control-Allow-Origin "*"
    &lt;/FilesMatch&gt;
  &lt;/IfModule&gt;
  </code></pre>
  
  <p>Why is it that</p>
  
  <pre><code>$.get('https://www.sarahlawrence.edu/_assets/v6/fonts/otama-text-regular/otamatextregular.eot')`
  </code></pre>
  
  <p>works (try it in the console from any domain), whereas </p>
  
  <pre><code>$.get('https://www.sarahlawrence.edu/_assets/v6/lib/icons.data.svg.css')
  </code></pre>
  
  <p>fails with this error:</p>
  
  <blockquote>
    <p>XMLHttpRequest cannot load <a href="https://www.sarahlawrence.edu/_assets/v6/lib/icons.data.svg.css" rel="nofollow">https://www.sarahlawrence.edu/_assets/v6/lib/icons.data.svg.css</a>. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin '<a href="https://whatever.com" rel="nofollow">https://whatever.com</a>' is therefore not allowed access.</p>
  </blockquote>
  
  <p>And how can I get it working?</p>