[vhosts] Enable cross-domain requests for embed fonts