Marc-André Bombeck e34c5db45e fix(pwa): confirm a foreign origin before the worker retires ...

A reverse proxy with a response-header allowlist strips
X-HealthLog-Page from every real HealthLog page, and the worker then
unregistered on each load and dropped Web Push subscriptions.

A successful page without the marker now only sends requests to the
network while the worker asks /api/version with no-store and a manual
redirect. It deletes its caches and unregisters only when the answer
positively is not HealthLog: a 404, a non-JSON 2xx, or JSON without
the version shape. A failed probe, any other status or the HealthLog
shape resumes normal service. buildSha may be null on a self-built
image, so only its presence is checked.

Refs #847

2026-09-13 14:16:52 +02:00

..

apple-touch-icon.png

fix(ui): unclip the score-ring glow, reachable insight pills, consistent destructive actions

2026-06-10 12:56:06 +02:00

favicon.svg

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

injection-body-front.png

feat(medications): replace the injection-site body map with a refined illustration

2026-06-04 21:34:10 +02:00

logo-192.png

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

logo-512.png

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

logo-maskable-192.png

feat(pwa): add manifest shortcuts and a 192 maskable icon

2026-06-14 10:49:00 +02:00

logo-maskable-512.png

fix(ui): unclip the score-ring glow, reachable insight pills, consistent destructive actions

2026-06-10 12:56:06 +02:00

logo-readme.png

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

logo-readme.svg

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

manifest.json

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

sw.js

fix(pwa): confirm a foreign origin before the worker retires

2026-09-13 14:16:52 +02:00