appview: drop crossorigin from the imgs.blue preconnect

Connections are keyed by credentials mode. The crossorigin attribute
opened the imgs.blue socket in anonymous-CORS mode, but every request
to that origin is a plain <img src> avatar fetch (BlobCDNURL /
resizeImage) in no-cors mode, so nothing could reuse it. The browser
opened a second connection anyway and Lighthouse flagged the hint as
unused while still listing imgs.blue as a preconnect candidate worth
~300ms of LCP.

The attribute is correct for the font preloads below, which is where it
was likely copied from; comment the distinction so it stays put.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LpqkSRqpcnAjsSZgFTUN5z
This commit is contained in:
Evan Jarrett
2026-08-31 16:57:49 -05:00
co-authored by Claude Opus 5
parent 777bd15149
commit ee9ccc1fb8
+6 -2
View File
@@ -12,8 +12,12 @@
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
<link rel="manifest" href="/site.webmanifest" />
<!-- Resource hints for external domains -->
<link rel="preconnect" href="https://imgs.blue" crossorigin>
<!-- Resource hints for external domains. No crossorigin on the
preconnect: avatars are plain <img src> fetches (no-cors), and
connections are keyed by credentials mode, so a CORS-mode
preconnect warms a socket nothing reuses. Fonts below are the
opposite case and do need crossorigin. -->
<link rel="preconnect" href="https://imgs.blue">
<link rel="dns-prefetch" href="https://imgs.blue">
<!-- Preload critical assets. Font list is discovered from the public FS