From bf82644461d95c8621923ffb472f50c1a65f9c33 Mon Sep 17 00:00:00 2001
From: Pierre Ossman <ossman@cendio.se>
Date: Mon, 9 Oct 2017 16:00:38 +0200
Subject: [PATCH] Get proper same-origin behaviour when loading modules

The browsers currently do not default to same-origin behaviour for
modules, so we need to be explicit in order for necessary
credentials to be passed along. This seems to be changing though,
but we need to wait for the browsers to actually roll out more
lenient defaults:

https://github.com/whatwg/fetch/pull/585
---
 vnc.html      | 2 +-
 vnc_lite.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/vnc.html b/vnc.html
index 7845fa66..44cbae16 100644
--- a/vnc.html
+++ b/vnc.html
@@ -78,7 +78,7 @@
         });
     </script>
     <!-- actual script modules -->
-    <script type="module" src="app/ui.js"></script>
+    <script type="module" crossorigin="anonymous" src="app/ui.js"></script>
     <!-- end scripts -->
 </head>
 
diff --git a/vnc_lite.html b/vnc_lite.html
index 729aabb1..f54cb13a 100644
--- a/vnc_lite.html
+++ b/vnc_lite.html
@@ -74,7 +74,7 @@
     </script>
 
     <!-- actual script modules -->
-    <script type="module">
+    <script type="module" crossorigin="anonymous">
         // Load supporting scripts
         import * as WebUtil from './app/webutil.js';
         import RFB from './core/rfb.js';