From 288a9e78205a1274359c561a789a0f48c99cd491 Mon Sep 17 00:00:00 2001
From: rxu <rxu@mail.ru>
Date: Tue, 17 Dec 2024 16:34:14 +0700
Subject: [PATCH] Protect manifest request by CORS to prevent guest sessions.

---
 styles/all/template/event/overall_header_head_append.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/styles/all/template/event/overall_header_head_append.html b/styles/all/template/event/overall_header_head_append.html
index 77c4466..3dc4a1b 100644
--- a/styles/all/template/event/overall_header_head_append.html
+++ b/styles/all/template/event/overall_header_head_append.html
@@ -14,7 +14,7 @@
 <meta name="application-name" content="{{ SHORT_SITE_NAME }}">
 
 <!-- Link to app's configuration manifest -->
-<link rel="manifest" href="{{ U_MANIFEST_URL }}">
+<link rel="manifest" href="{{ U_MANIFEST_URL }}" crossorigin="">
 
 {% if U_TOUCH_ICON %}
 <!-- App icon for iOS, a fallback to icons defined in the manifest -->