Lexicon icons.svg missing Access-Control-Allow-Origin header

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 7.0.X EE, Master
• Fix Version/s: 7.0.0 DXP FP21, 7.0.0 DXP SP4, 7.0.X EE, Master
• Component/s: Application Security
• Labels:
  • QA-NF
  • liferay-digital-enterprise-70-sp4
  • liferay-fixpack-de-21-7010
• Branch Version/s:
  7.0.x
• Backported to Branch:
  Committed
• Story Points: 1.25
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/49578

Steps to Reproduce

1. Add an entry to your system's hosts file for abc.com that points to your local server.
2. Create a portal-ext.properties file with at least the following properties:

   redirect.url.ips.allowed=
   cdn.host.http=http://abc.com:8080/
   cdn.dynamic.resources.enabled=false
   

3. Startup Liferay and visit http://localhost:8080/

Expected behavior is that there are no errors in the Javascript console. Actual behavior is there are errors in the Javascript console indicating there is a missing Access-Control-Allow-Origin header.