Make the "cross_origin" compatible with the Shield module

Problem/Motivation

Currently, when the "cross_origin" setting is enabled as well as the shield module ( https://www.drupal.org/project/shield → ), the manifest won't apply for the site and the console will shows unauthorization errors:

Failed to load resource: manifest.json => the server responded with a status of 401 ().
Manifest: Line: 1, column: 1, Syntax error.

Steps to reproduce

Proposed resolution

Make the cross_origin setting compatible with the shield module

Remaining tasks

User interface changes

API changes

Data model changes