allow cross-domain fonts,
changelog updated