Searched hist:"5 ed7bacec486014377d5973347d50fb7953c84ad" (Results 1 – 1 of 1) sorted by relevance
| /dokuwiki/inc/ |
| H A D | template.php | 5ed7bacec486014377d5973347d50fb7953c84ad Sat Mar 15 09:50:27 UTC 2025 Andreas Gohr <andi@splitbrain.org> set crossorigin header for manifest. fixes #4322
To summarize the issue:
1. the wiki is protected by Basic auth, outside of the wiki
2. chrome will not pass authentication credentials when accessing a
linked manifest
3. the webserver will deny access to the manifest
DokuWiki does not care about the auth credentials, because the manifest
returns public info only. The issue is really with the webserver
denying the request.
Using a crossorigin hint will work around the chrome behaviour. The only
potential downside would be that chrome now will send auth credentials
even when there is no web server based auth. Since DokuWiki doesn't care,
it's not really a downside.
|