[the8472]

Because the spec says font-loads from stylesheets must always be anonymous CORS. Thus the preload needs to match that.

https://drafts.csswg.org/css-fonts/#font-fetching-requiremen...