cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use fetch() instead of iframe to make remote control requests

Browse source
This commit is contained in:
Anton Khorev 2022-10-20 15:29:57 +03:00
parent 572d1adaae
commit 821ebdd57b
2 changed files with 5 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/controllers/application_controller.rb
View file

@ -253,9 +253,7 @@ class ApplicationController < ActionController::Base
def map_layout
policy = request.content_security_policy.clone
policy.child_src(*policy.child_src, "http://127.0.0.1:8111", "https://127.0.0.1:8112")
policy.frame_src(*policy.frame_src, "http://127.0.0.1:8111", "https://127.0.0.1:8112")
policy.connect_src(*policy.connect_src, Settings.nominatim_url, Settings.overpass_url, Settings.fossgis_osrm_url, Settings.graphhopper_url, Settings.fossgis_valhalla_url)
policy.connect_src(*policy.connect_src, "http://127.0.0.1:8111", Settings.nominatim_url, Settings.overpass_url, Settings.fossgis_osrm_url, Settings.graphhopper_url, Settings.fossgis_valhalla_url)
policy.form_action(*policy.form_action, "render.openstreetmap.org")
policy.style_src(*policy.style_src, :unsafe_inline)