Visitors on iOS prompted to download empty "auth-frame" file

[molly]

Issue Summary

Visitors to my Ghost blog on iOS have been reporting being prompted to download a file titled "auth-frame" when they click on articles, which is an empty 0KB file if downloaded. I've been able to reproduce on Safari on iPadOS 17.0.2, and some of the people were reporting the issue on Safari iOS, Firefox iOS, and Safari MacOS.

Rolling back Ghost from 5.82.3 to 5.79.0 has resolved the issue for now, so it was presumably introduced somewhere in there.

Steps to Reproduce

1. Open a recent (v5.82.3) Ghost blog on an iOS device or Safari. I did not check other browsers on iPadOS, and did not check the Ghost versions released between 5.79.1 and 5.82.3, but I did try to reproduce on other browsers on MacOS (recent Chrome/Firefox) and could not.
2. Open any article on the blog.

Ghost Version

5.82.3

Node.js Version

18.17.1

How did you install Ghost?

Ubuntu 22.04.3 LTS, one-click install on DigitalOcean

Database type

MySQL 8

Browser & OS version

iPadOS 17.0.2 (and other iOS)

Relevant log / error output

No response

Code of Conduct

• I agree to be friendly and polite to people in this repository

[molly]

Nevermind, I think this has to do with a very specific issue on my end.