How to add an Access-Control-Allow-Origin header in IIS7 with restrictions

asp.net iis cross-domain font-face access-control

Have you tried to put a web.config in the desired subfolder only? Have a look at "ASP.NET Configuration File Hierarchy and Inheritance".