\
**Category:** Hosting Support\
**Created:** [September 14, 2026, 2:03pm UTC](https://forum.infinityfree.com/t/pwa-manifest-json-is-being-served-as-text-html-due-to-security-challenge/120656 "2026-09-14T14:03:59Z")\
**Posts on this page:** 3\
**Page:** 1
**Author:**  [@savetrack](https://forum.infinityfree.com/u/savetrack)\
**Post date:** [September 14, 2026, 2:03pm UTC](https://forum.infinityfree.com/t/pwa-manifest-json-is-being-served-as-text-html-due-to-security-challenge/120656/1 "2026-09-14T14:03:59Z")
### Website URL
[https://savetrack.rf.gd/](https://savetrack.rf.gd/)
### Error Message
Chrome DevTools reports:
Line: 1, column: 1. Syntax error.
When requesting:
[https://savetrack.rf.gd/manifest.json](https://savetrack.rf.gd/manifest.json)
the server returns:
Status: 200 OK
Content-Type: text/html
Server: openresty
instead of returning the JSON manifest.
The response contains the InfinityFree browser security challenge HTML that loads /aes.js and sets the \_\_test cookie.
### Other Information
Hello InfinityFree Support,
I am trying to make my Laravel website installable as a PWA on Android.
My manifest.json is valid JSON and can be opened directly in the browser:
[https://savetrack.rf.gd/manifest.json](https://savetrack.rf.gd/manifest.json)
The PWA icons are also accessible:
The \_\_test cookie is already present in the browser, but the manifest request is still being returned as text/html instead of JSON.
The Service Worker is also registered and activated successfully.
Could you please check whether the InfinityFree browser/security verification system is intercepting the /manifest.json request?
Is it possible to exclude /manifest.json from this security challenge, or otherwise allow the manifest to be served with the correct JSON Content-Type?
Thank you for your help.
---
**Author:**  [@Meishin](https://forum.infinityfree.com/u/Meishin)\
**Post date:** [September 14, 2026, 2:24pm UTC](https://forum.infinityfree.com/t/pwa-manifest-json-is-being-served-as-text-html-due-to-security-challenge/120656/2 "2026-09-14T14:24:53Z")
Due to how browsers handle cookies PWA manifests cannot work the traditional way. Please follow this guide:
> [@How to make a (working!) Progressive Web App!](https://forum.infinityfree.com/t/how-to-make-a-working-progressive-web-app/116505):
>
> Have you thought about making your site an app? You probably don’t want to deal with Java/Kotlin or Applescript to make an app for your users, but you want to get that sweet-sweet-beautiful program on your site to work outside of that clumsy browser. Well, there is a way! If you want to make your site an app, you can make a Progressive Web App! Wait, what’s a Progressive Web App? A Progressive Web App (PWA) is a website that works like a mobile app on your phone or tablet. You can install it …
---
**Author:**  [@system](https://forum.infinityfree.com/u/system)\
**Post date:** [September 21, 2026, 2:25pm UTC](https://forum.infinityfree.com/t/pwa-manifest-json-is-being-served-as-text-html-due-to-security-challenge/120656/3 "2026-09-21T14:25:52Z")
Closed on September 21, 2026, 2:25pm UTC
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.