From e37540877733b666340492dec52162bb4048fd37 Mon Sep 17 00:00:00 2001
From: Rohan Kapoor <rohan@rohankapoor.com>
Date: Fri, 10 Jul 2020 17:29:29 -0700
Subject: [PATCH] Provide credentials to relative links only (#6360)

Co-authored-by: Paulus Schoutsen <paulus@home-assistant.io>
---
 src/common/dom/load_resource.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/common/dom/load_resource.ts b/src/common/dom/load_resource.ts
index f8df3f2366..670afddc9e 100644
--- a/src/common/dom/load_resource.ts
+++ b/src/common/dom/load_resource.ts
@@ -23,7 +23,7 @@ const _load = (
         if (type) {
           (element as HTMLScriptElement).type = type;
           // https://github.com/home-assistant/frontend/pull/6328
-          (element as HTMLScriptElement).crossOrigin = "use-credentials";
+          (element as HTMLScriptElement).crossOrigin = url.substr(0, 1) === "/" ? "use-credentials" : "anonymous";
         }
         break;
       case "link":