From DeoVR 13.17 on thumbnails are not displayed anymore

[Samsonite121]

So, after DeoVR updated to Version 13.17 suddenly it doesn't display any thumbnails, just empty fields in the grid and you can see the background picture of Deo (if you have choosen one).

I've then tried many things also in XBVR code itself (I'm able to compile individual versions of XBVR for myself):

• First I thought it could be a timing related issue that it takes to long for XBVR to create the deovr.json. In my system with 17 lists it takes about 7 - 8 seconds to create the deovr.json (2300 single scenes, don't know how many if I count over all lists). But then I discovered one thing, If I use DeoVR Steam version on the same machine as XBVR over Virtual Desktop the thumbnails are displayed if I connect to localhost:9999 and don't display if I connect to the name or IP address of my XBVR machine.
• The location of the thumb-images are transferred twice, once in the DeoList and then also in the individual DeoScenes. I disabled the one an the other to have only one reference but both tries failed.
• I disabled gzip encoding from Improve loading time of HereSphere and DeoVR lists #1383 but also this doesn't change the behaviour.
• I traced the connection with Wireshark from DeoVR from a Pico4 and local once to localhost and once to the IP address. Nothing special but if I connect to localhost there are the HTTP GETs to the thumb images (coverURL) in the imageproxy path, in the other cases not.
• Then I traced the connection with Wireshark from my old Quest 2 which was still on DeoVR 13.16 and worked to perhaps see what changed. Then I saw the change they made. To speed up the display of the thumbnails they changed their webrequest framework from the proprietary one they still use to get the json files
  (User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/40.0.2214.111 Chrome/40.0.2214.111 Safari/537.36 HMD/0 [DEO13.17])
  to the UnityPlayer with libCurl (User-Agent: UnityPlayer/2022.3.15f1 (UnityWebRequest/1.0, libcurl/8.4.0-DEV).
  And it seems that this libCurl implementation is configured to only accept encrypted traffic/URLs (https) from remote hosts but only accepts unencrypted (http) from localhosts. But it's still strange: if I use localhost:9999 or 127.0.0.1:9999 it works but with [::1:9999] it doesn*t work. But I see in Wireshark that localhost:9999 is resolved to [::1:9999].

So I changed the code in /pkg/api/deovr.go in getDeoScene for the thumbnailURL to circumvent the imageproxy thumbnailURL= session.DeoRequestHost + "/img/700x/" + strings.Replace(scene.CoverURL, "://", ":/", -1) and directly use the coverURL from the originally scraped scenes as they are all encrypted https links thumbnailURL := scene.CoverURL.

And it worked for me but is not intended like that.

So my question:
Can / should it be to provide an option for users to get the XBVR server encypted with TLS1.2?
I don't know but perhaps DeoVR will restrict the sites to use encrypted links in the future?

I'm dependent of DeoVR as my GoTo headset Pico4 has no Heresphere and I don't want to go back to Quest2 because of the great visuals and also the color passthrough options of Pico4.

[7kt-swe]

I downgraded to 30th January 2023 version ever since they broke the grab and drag positioning camera environment back in november 2023 (Valve Index)
https://steamdb.info/depot/837381/manifests
App ID: 837380
Depot ID: 837381
Manifest ID: 5561029291497340428

steam://open/console
download_depot 837380 837381 5561029291497340428
Just make a shortcut of the exe in the downloaded content folder (in steamapps\content) and add it as an external software in your steam library .
Never had han issue with anything since then