[openstreetmap/openstreetmap-website] Added color preview box in tag browser sidebar (#1779)

[Tom Hughes]

I know the nonce will work in principle - the question is whether there is a good way for use to use one that doesn't negate the purpose. We almost certainly can't just commit the nonce in this repository for example as that would defeat the whole purpose.

So at the very least it probably needs to be a configuration option that can be set from chef. Even then I'm not sure that it helps much given a bad actor can just access the source and copy the nonce.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1779#issuecomment-374252892
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20180319/39eb8242/attachment.html>