Skip to content

manifest v5.47.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Apr 14:01
manifest@5.47.2
665b58d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🐛 Patch Changes

  • 135b9e3: Fix blank dashboard when exposing Manifest on a LAN IP over HTTP. Helmet's default CSP emitted upgrade-insecure-requests, which browsers enforce on private IPv4 ranges (10.x, 172.16-31.x, 192.168.x) but relax for localhost — so the JS bundle was rewritten to https:// and silently failed to load, leaving an empty <body>. The directive is now disabled; HTTPS deployments should enforce upgrades via HSTS at the reverse proxy instead.
Assets 2
Loading