PWA manifest.json is being served as text/html due to security challenge

Website URL

https://savetrack.rf.gd/

Error Message

Chrome DevTools reports:

Line: 1, column: 1. Syntax error.

When requesting:
https://savetrack.rf.gd/manifest.json

the server returns:
Status: 200 OK
Content-Type: text/html
Server: openresty

instead of returning the JSON manifest.

The response contains the InfinityFree browser security challenge HTML that loads /aes.js and sets the __test cookie.

Other Information

Hello InfinityFree Support,

I am trying to make my Laravel website installable as a PWA on Android.

My manifest.json is valid JSON and can be opened directly in the browser:

https://savetrack.rf.gd/manifest.json

The PWA icons are also accessible:



The __test cookie is already present in the browser, but the manifest request is still being returned as text/html instead of JSON.

The Service Worker is also registered and activated successfully.

Could you please check whether the InfinityFree browser/security verification system is intercepting the /manifest.json request?

Is it possible to exclude /manifest.json from this security challenge, or otherwise allow the manifest to be served with the correct JSON Content-Type?

Thank you for your help.

Due to how browsers handle cookies PWA manifests cannot work the traditional way. Please follow this guide: