diff --git a/html/ports.js b/html/ports.js
index 3548bac..257f397 100644
--- a/html/ports.js
+++ b/html/ports.js
@@ -42,9 +42,9 @@ function createPortTable() {
       for (let i = 1; i <= numPorts; i++) {
         let td = tr.insertCell();
         if (pIsSFP[i-1])
-          td.innerHTML = '<object type="image/svg+xml" data="sfp.svg", width="60"</object>'
+          td.innerHTML = '<object type="image/svg+xml" data="sfp.svg" width="60"></object>'
         else
-          td.innerHTML = '<object type="image/svg+xml" data="port.svg", width="40"</object>'
+          td.innerHTML = '<object type="image/svg+xml" data="port.svg" width="40"></object>'
       }
       tr = tbl.insertRow();
       for (let i = 1; i <= numPorts; i++) {
diff --git a/html/style.css b/html/style.css
index b27ad56..61a9b8a 100644
--- a/html/style.css
+++ b/html/style.css
@@ -65,7 +65,7 @@ button:hover { background-color: #226; color: white;}
 /*  outline: 2px solid #f00;*/
   opacity: 1.0;
 }
-object {
+object, img {
  margin: 0.5em 0.5em;
 }
 .cbgroup {
diff --git a/httpd/httpd.c b/httpd/httpd.c
index b9d6ead..a35274a 100644
--- a/httpd/httpd.c
+++ b/httpd/httpd.c
@@ -598,7 +598,9 @@ void httpd_appcall(void)
 			}
 		} else {
 			dbg_string("Have entry, authenticated: "); dbg_byte(authenticated); dbg_char('\n');
-			if (!authenticated && !(f_data[entry].start == FDATA_START_login_html
+			if (!authenticated && !(f_data[entry].start == FDATA_START_login_html 
+						|| f_data[entry].start == FDATA_START_port_svg 
+						|| f_data[entry].start == FDATA_START_sfp_svg
 						|| f_data[entry].start == FDATA_START_style_css)) {
 				send_to_login();
 				goto do_send;
@@ -610,7 +612,8 @@ void httpd_appcall(void)
 
 			slen = strtox(outbuf, "HTTP/1.1 200 OK\r\nContent-Type: ");
 			slen += strtox(outbuf + slen, mime_strings[f_data[entry].mime]);
-			slen += strtox(outbuf + slen, "; charset=UTF-8\r\nCache-Control: max-age=60, must-revalidate\r\n\r\n");
+			slen += strtox(outbuf + slen, "; charset=UTF-8\r\nCache-Control: max-age=60, must-revalidate\r\nAccess-Control-Allow-Origin: *\r\n\r\n");
+
 			len_left = f_data[entry].len;
 			if (len_left > (TCP_OUTBUF_SIZE - slen)) {
 				cont_len = len_left - (TCP_OUTBUF_SIZE - slen);