<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">Hello,</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">this message is a bug report for</div>
<div data-evo-paragraph="" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"><a href="https://www.openstreetmap.org/edit" style="color: rgb(27, 106, 203);">https://www.openstreetmap.org/edit</a> (iD editor).</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">The current CSP of <a href="https://www.openstreetmap.org/edit" style="color: rgb(27, 106, 203);">https://www.openstreetmap.org/edit</a> (iD editor) prevents using the "download osmChange file" link in Firefox. The link is accessible when clicking on the "save" button. Clicking on the link currently triggers no change in the GUI but an error message in the browser console is logged:</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> Content Security Policy: The page’s settings blocked the loading of a</div>
<div data-evo-paragraph="" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> resource at blob:<a href="https://www.openstreetmap.org/<<uuid" style="color: rgb(27, 106, 203);">https://www.openstreetmap.org/<uuid</a>> ("frame-src").</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">The current CSP is:</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> default-src 'self'; ... frame-src 'self'; ...</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">So I think that `blob:` should be added to `frame-src`.</div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
<div data-evo-paragraph="" id="-x-evo-input-start" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;">Regards</div>
<div data-evo-paragraph="" style="caret-color: rgb(46, 52, 54); color: rgb(46, 52, 54); font-family: monospace; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0, 0.4); -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none; width: 78ch;"> </div>
</div></div></body></html>