CORS same origin is blocking plex-sans

[tjex]

Checked out my site today (www.tillmanjex.info) and the text was rendering with times (i think).

Checked the developer console and it looks like plex-sans is being blocked by same origin policy and not being loaded from Blots CDN.

GET
https://blotcdn.com/fonts/plex-sans/bold.woff2?version=1759ad&extension=.woff2
CORS Missing Allow Origin

	
GET
	https://blotcdn.com/fonts/plex-sans/bold.woff2?version=1759ad&extension=.woff2
Status
404
Not Found
VersionHTTP/1.1
Transferred428 B (14 B size)
Referrer Policystrict-origin-when-cross-origin
Request PriorityHigh

    	
    Blot-Cache
    	proxied
    Connection
    	keep-alive
    Content-Length
    	14
    Content-Type
    	text/html; charset=utf-8
    Date
    	Sun, 07 May 2023 17:03:34 GMT
    Server
    	openresty
    Via
    	1.1 b61409af370dbf025ffc910b1252c65e.cloudfront.net (CloudFront)
    X-Amz-Cf-Id
    	IeM2tggsZJdEbwihYOHj-_jhIjxrgIDwaUjyM7c6reIOy-iLHozw4g==
    X-Amz-Cf-Pop
    	AMS54-C1
    X-Cache
    	Error from cloudfront
    X-Frame-Options
    	SAMEORIGIN
    	
    Accept
    	application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
    Accept-Encoding
    	identity
    Accept-Language
    	en-GB,en;q=0.5
    Connection
    	keep-alive
    Host
    	blotcdn.com
    Origin
    	https://www.tillmanjex.info
    Referer
    	https://www.tillmanjex.info/
    Sec-Fetch-Dest
    	font
    Sec-Fetch-Mode
    	cors
    Sec-Fetch-Site
    	cross-site
    Sec-GPC
    	1
    User-Agent
    	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/112.0

[davidmerfield]

Did you happen to proxy your site through Cloudflare? Blot sites shouldn't require same-origin for the font files by default

[tjex]

nope. I haven't set anything up like this. I'm very much still on the default user behaviour of uploading to dropbox.
I do edit my theme locally, but also in the dropbox environment.