---
title: performance/font-preload-crossorigin ยท Font preload missing crossorigin
description: A font preload must set crossorigin so the preloaded file is actually used.
---
**Severity:** warning
## What it checks
Every `` must include the `crossorigin` attribute. A font preload without it is flagged.
## Why it matters
A font preload without `crossorigin` does not match the actual (CORS) font request, so the preloaded file is never used and the font downloads twice.
## How to fix
Add `crossorigin` to the font preload:
```html
```
## Mode differences
**Source analysis** (the CLI, the dashboard's static baseline) composes each route's `` from `` in the page and its layout chain, followed into repo-local components, plus the known meta components (`svelte-meta-tags`, `svelte-seo`) and any you declare in `metaComponents`. It judges only a **literal** value; it never examines a dynamic one. **Rendered analysis** (the Vite plugin's build pass, a route you visit in the dashboard) reads the shipped ``, where every value is literal; the build pass covers prerendered routes only. When the two disagree, trust the rendered result.
## Disabling
Record existing findings in the suppressions file (`npx svelte-vitals --update-suppressions`), scope the rule per route or path with `overrides`, or turn it off:
```js svelte-vitals.config.js
export default {
rules: {
'performance/font-preload-crossorigin': 'off'
}
};
```