cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use https to launch the remote editor except for modern browsers

Browse source 
Currently only Chrome 53+ and Firefox 55+ are known to support loading
of http resources from localhost for an https page.
This commit is contained in:
Tom Hughes 2018-05-15 14:08:57 +01:00
parent c77c7d015f
commit 50f85248db
4 changed files with 632 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/controllers/application_controller.rb
View file

@ -409,8 +409,8 @@ class ApplicationController < ActionController::Base
def map_layout
append_content_security_policy_directives(
:child_src => %w[http://127.0.0.1:8111],
:frame_src => %w[http://127.0.0.1:8111],
:child_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112],
:frame_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112],
:connect_src => %w[nominatim.openstreetmap.org overpass-api.de router.project-osrm.org],
:form_action => %w[render.openstreetmap.org],
:script_src => %w[graphhopper.com open.mapquestapi.com],