Merge remote-tracking branch 'upstream/pull/5375'

This commit is contained in:
Tom Hughes 2024-12-08 14:55:55 +00:00
commit 7b05c1c060
2 changed files with 5 additions and 17 deletions

View file

@ -253,9 +253,7 @@ class ApplicationController < ActionController::Base
def map_layout
policy = request.content_security_policy.clone
policy.child_src(*policy.child_src, "http://127.0.0.1:8111", "https://127.0.0.1:8112")
policy.frame_src(*policy.frame_src, "http://127.0.0.1:8111", "https://127.0.0.1:8112")
policy.connect_src(*policy.connect_src, Settings.nominatim_url, Settings.overpass_url, Settings.fossgis_osrm_url, Settings.graphhopper_url, Settings.fossgis_valhalla_url)
policy.connect_src(*policy.connect_src, "http://127.0.0.1:8111", Settings.nominatim_url, Settings.overpass_url, Settings.fossgis_osrm_url, Settings.graphhopper_url, Settings.fossgis_valhalla_url)
policy.form_action(*policy.form_action, "render.openstreetmap.org")
policy.style_src(*policy.style_src, :unsafe_inline)