<p></p>
<p dir="auto">Firstly that is not CORS that is CSP.</p>
<p dir="auto">Secondly we declare all the servers we use - if you decide to patch the site in your browser that you get to pick up the pieces. We're not going to reduce security for all our users just so you can play silly buggers.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/3572#issuecomment-1157065695">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLL4Q6BIXA5OVBXJKWTVPJQKVANCNFSM5Y32RBYA">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLI2W664THOSJAHWLZDVPJQKVA5CNFSM5Y32RBYKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOIT3WXXY.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/issues/3572/1157065695</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/issues/3572#issuecomment-1157065695",
"url": "https://github.com/openstreetmap/openstreetmap-website/issues/3572#issuecomment-1157065695",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>