Protect manifest request by CORS to prevent guest sessions.

phpbb-extensions · Dec 17, 2024 · 288a9e7 · 288a9e7
1 parent 4d5c5a1
commit 288a9e7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/styles/all/template/event/overall_header_head_append.html b/styles/all/template/event/overall_header_head_append.html
@@ -14,7 +14,7 @@
 <meta name="application-name" content="{{ SHORT_SITE_NAME }}">
 
 <!-- Link to app's configuration manifest -->
-<link rel="manifest" href="{{ U_MANIFEST_URL }}">
+<link rel="manifest" href="{{ U_MANIFEST_URL }}" crossorigin="">
 
 {% if U_TOUCH_ICON %}
 <!-- App icon for iOS, a fallback to icons defined in the manifest -->