Access to Font at ‘https://www.my.url/media/pdp/fonts/lobster.otf’ from origin ‘http://www.my.url’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘http://www.my.url’ is therefore not allowed access.

It blocks because the used URL automatically uses HTTPS, which it doesn’t like, when the product page is pure HTTP.