访问控制允许原点问题

I have the following in my .htaccess located in http://cdn.example.com

Header add Access-Control-Allow-Origin "http://example.com"

When I go to my site it works fine and allows me to grab from my CDN.

BUT A user of my site just pointed out to me that when you go to www.example.com (www. before site name) it wont load font files. I tried adding another header add but it then says theres 2 values and it just goes for only one of them (example.com)

I have no idea how to fix this I generally want a way to fix this from htaccess and not from a php file.