Merge branch 'master' into fix/crashes-add-edit-delete-comment-args

Author: tryshank

CHANGELOG.md

@@ -1,3 +1,7 @@
+## Version 25.03.xx
+Fixes:
+- [web] Use Client Hints
+
 ## Version 25.03.37
 Fixes:
 - [core] Update home page download notification text

api/utils/common.js

@@ -1308,9 +1308,13 @@ common.returnRaw = function(params, returnCode, body, heads) {
         }
         return;
     }
-    const defaultHeaders = {};
+    const defaultHeaders = {
+        'Accept-CH': 'Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Model',
+        'Critical-CH': 'Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version',
+        'X-Countly': 'api'
+    };
     //set provided in configuration headers
-    let headers = {};
+    let headers = { ...defaultHeaders };
     if (heads) {
         for (var i in heads) {
             headers[i] = heads[i];
@@ -1356,7 +1360,10 @@ common.returnMessage = function(params, returnCode, message, heads, noResult = f
     }
     //set provided in configuration headers
     const defaultHeaders = {
-        'Content-Type': 'application/json; charset=utf-8'
+        'Content-Type': 'application/json; charset=utf-8',
+        'Accept-CH': 'Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Model',
+        'Critical-CH': 'Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version',
+        'X-Countly': 'api'
     };
     let headers = { ...defaultHeaders };
     var add_headers = (plugins.getConfig("security").api_additional_headers || "").replace(/\r\n|\r|\n/g, "\n").split("\n");
@@ -1431,7 +1438,10 @@ common.returnOutput = function(params, output, noescape, heads) {
     }
     //set provided in configuration headers
     const defaultHeaders = {
-        'Content-Type': 'application/json; charset=utf-8'
+        'Content-Type': 'application/json; charset=utf-8',
+        'Accept-CH': 'Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Model',
+        'Critical-CH': 'Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version',
+        'X-Countly': 'api'
     };
     let headers = { ...defaultHeaders };
     var add_headers = (plugins.getConfig("security").api_additional_headers || "").replace(/\r\n|\r|\n/g, "\n").split("\n");