Enable CORS for legacy bundle loading (#18248)

home-assistant · Oct 16, 2023 · d88831b · d88831b
1 parent 3b2f6d7
commit d88831b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/build-scripts/webpack.cjs b/build-scripts/webpack.cjs
@@ -194,6 +194,7 @@ const createWebpackConfig = ({
         isProdBuild && !isStatsBuild ? "[id]-[contenthash].js" : "[name].js",
       assetModuleFilename:
         isProdBuild && !isStatsBuild ? "[id]-[contenthash][ext]" : "[id][ext]",
+      crossOriginLoading: "use-credentials",
       hashFunction: "xxhash64",
       hashDigest: "base64url",
       hashDigestLength: 11, // full length of 64 bit base64url

diff --git a/src/html/_js_base.html.template b/src/html/_js_base.html.template
@@ -1,8 +1,9 @@
 <script>
-  function _ls(src, sync) {
+  function _ls(src, notCustom) {
     var script = document.createElement("script");
-    if (sync) {
+    if (notCustom) {
       script.async = false;
+      script.crossOrigin = "use-credentials";
     }
     script.src = src;
     return document.head.appendChild(script);