Bug report: Content Security Policy prevents osmChange file download

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Bug report: Content Security Policy prevents osmChange file download

takhsofhdy
Hello,
 
this message is a bug report for
 
The current CSP of https://www.openstreetmap.org/edit (iD editor) prevents using the "download osmChange file" link in Firefox. The link is accessible when clicking on the "save" button. Clicking on the link currently triggers no change in the GUI but an error message in the browser console is logged:
 
    Content Security Policy: The page’s settings blocked the loading of a
    resource at blob:https://www.openstreetmap.org/<uuid> ("frame-src").
 
The current CSP is:
 
    default-src 'self'; ... frame-src 'self'; ...
 
So I think that `blob:` should be added to `frame-src`.
 
Regards
 

_______________________________________________
dev mailing list
[hidden email]
https://lists.openstreetmap.org/listinfo/dev