cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix security policy for mapillary in iD

Browse source
This commit is contained in:
Tom Hughes 2017-11-24 01:09:27 +00:00
parent 6a1a4a3f7d
commit 527ec293c2
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
app/controllers/site_controller.rb
View file

@ -120,9 +120,9 @@ class SiteController < ApplicationController
def id
append_content_security_policy_directives(
:connect_src => %w[nominatim.openstreetmap.org taginfo.openstreetmap.org *.mapillary.com openstreetcam.org],
:img_src => %w[*],
:script_src => %w[dev.virtualearth.net]
:connect_src => %w[nominatim.openstreetmap.org taginfo.openstreetmap.org *.mapillary.com d1cuyjsrcm0gby.cloudfront.net d1brzeo354iq2l.cloudfront.net openstreetcam.org],
:img_src => %w[* blob:],
:script_src => %w[dev.virtualearth.net 'unsafe-eval']
)
render "id", :layout => false