From 288a9e78205a1274359c561a789a0f48c99cd491 Mon Sep 17 00:00:00 2001
From: rxu <rxu@mail.ru>
Date: Tue, 17 Dec 2024 16:34:14 +0700
Subject: [PATCH 1/2] Protect manifest request by CORS to prevent guest
 sessions.

---
 styles/all/template/event/overall_header_head_append.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/styles/all/template/event/overall_header_head_append.html b/styles/all/template/event/overall_header_head_append.html
index 77c4466..3dc4a1b 100644
--- a/styles/all/template/event/overall_header_head_append.html
+++ b/styles/all/template/event/overall_header_head_append.html
@@ -14,7 +14,7 @@
 <meta name="application-name" content="{{ SHORT_SITE_NAME }}">
 
 <!-- Link to app's configuration manifest -->
-<link rel="manifest" href="{{ U_MANIFEST_URL }}">
+<link rel="manifest" href="{{ U_MANIFEST_URL }}" crossorigin="">
 
 {% if U_TOUCH_ICON %}
 <!-- App icon for iOS, a fallback to icons defined in the manifest -->

From 7f0be8d3f61be431665b96ba151d87965800c06a Mon Sep 17 00:00:00 2001
From: rxu <rxu@mail.ru>
Date: Thu, 19 Dec 2024 23:09:34 +0700
Subject: [PATCH 2/2] Use "use-credentials" to make the code more relevant

---
 styles/all/template/event/overall_header_head_append.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/styles/all/template/event/overall_header_head_append.html b/styles/all/template/event/overall_header_head_append.html
index 3dc4a1b..0724173 100644
--- a/styles/all/template/event/overall_header_head_append.html
+++ b/styles/all/template/event/overall_header_head_append.html
@@ -14,7 +14,7 @@
 <meta name="application-name" content="{{ SHORT_SITE_NAME }}">
 
 <!-- Link to app's configuration manifest -->
-<link rel="manifest" href="{{ U_MANIFEST_URL }}" crossorigin="">
+<link rel="manifest" href="{{ U_MANIFEST_URL }}" crossorigin="use-credentials">
 
 {% if U_TOUCH_ICON %}
 <!-- App icon for iOS, a fallback to icons defined in the manifest -->