I’m having the same problem too.. Are you running a wildcard SSL? I have Header set Access-Control-Allow-Origin "*" in my htaccess file but did you need to actually include the word wildcard in that line?