v1.4.2
Fixed
- The embedded UI went blank when the page was opened through a URL with
embedded credentials (https://user:pass@host/): relative fetch URLs
inherit the document credentials and the Fetch spec rejects them. API
paths now resolve against location.origin, which never carries
credentials. Found by the first real user.