From 6c77240e0c6883a2f84d418d99a91e6a04f383db Mon Sep 17 00:00:00 2001
From: rxu <rxu@mail.ru>
Date: Tue, 17 Dec 2024 16:23:03 +0700
Subject: [PATCH 1/2] [ticket/17457] Protect manifest request by CORS to
 prevent guest sessions

PHPBB-17457
---
 phpBB/styles/prosilver/template/overall_header.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/phpBB/styles/prosilver/template/overall_header.html b/phpBB/styles/prosilver/template/overall_header.html
index 397ccde28f..62a90ecfc2 100644
--- a/phpBB/styles/prosilver/template/overall_header.html
+++ b/phpBB/styles/prosilver/template/overall_header.html
@@ -62,7 +62,7 @@
 	<link href="{T_ASSETS_PATH}/cookieconsent/cookieconsent.min.css?assets_version={T_ASSETS_VERSION}" rel="stylesheet">
 <!-- ENDIF -->
 
-<link rel="manifest" href="{{ U_MANIFEST }}">
+<link rel="manifest" href="{{ U_MANIFEST }}" crossorigin="">
 
 <!-- EVENT overall_header_head_append -->
 

From 6371dfc62fe1a1145a34e482c339bf03bf8495d3 Mon Sep 17 00:00:00 2001
From: rxu <rxu@mail.ru>
Date: Thu, 19 Dec 2024 23:08:12 +0700
Subject: [PATCH 2/2] [ticket/17457] Use "use-credentials" to make the code
 more relevant

PHPBB-17457
---
 phpBB/styles/prosilver/template/overall_header.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/phpBB/styles/prosilver/template/overall_header.html b/phpBB/styles/prosilver/template/overall_header.html
index 62a90ecfc2..b80d7ade3a 100644
--- a/phpBB/styles/prosilver/template/overall_header.html
+++ b/phpBB/styles/prosilver/template/overall_header.html
@@ -62,7 +62,7 @@
 	<link href="{T_ASSETS_PATH}/cookieconsent/cookieconsent.min.css?assets_version={T_ASSETS_VERSION}" rel="stylesheet">
 <!-- ENDIF -->
 
-<link rel="manifest" href="{{ U_MANIFEST }}" crossorigin="">
+<link rel="manifest" href="{{ U_MANIFEST }}" crossorigin="use-credentials">
 
 <!-- EVENT overall_header_head_append -->