From 813495c7f7720e399b440169fee27aea94ab1aaf Mon Sep 17 00:00:00 2001
From: Russell Harmon <eatnumber1@gmail.com>
Date: Wed, 29 Jun 2022 21:49:04 -0700
Subject: [PATCH] Set crossorigin use-credentials for manifest.json. (#2706)

This is necessary when running behind a password-protected reverse
proxy, as otherwise Chrome doesn't send HTTP basic auth credentials when
requesting this file.

See
https://stackoverflow.com/questions/6294622/html5-manifest-cache-behind-basic-auth
for more information.
---
 ui/v2.5/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ui/v2.5/index.html b/ui/v2.5/index.html
index 5a1a71ce2..b25ebc3d0 100755
--- a/ui/v2.5/index.html
+++ b/ui/v2.5/index.html
@@ -14,7 +14,7 @@
       manifest.json provides metadata used when your web app is installed on a
       user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
     -->
-    <link rel="manifest" href="manifest.json" />
+    <link rel="manifest" crossorigin="use-credentials" href="manifest.json" />
     <title>Stash</title>
     <script>window.STASH_BASE_URL = "/%BASE_URL%/"</script>
   </head>