[openstreetmap/openstreetmap-website] Avoid using jsonp for GraphHopper (#1872)

[Peter]

> Is there a suitable cross domain policy in place that will allow access?

Yes, it was reported it works for others :)

For https://graphhopper.com/api/1/info?key=_KEY_ you can see:

```
access-control-allow-origin=*
access-control-expose-headers=X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset,X-RateLimit-Credits
```

And 
`
curl -v -XOPTIONS 'https://graphhopper.com/api/1/info?key=_KEY_'
`
reports some more Access-Control headers
> to move graphopper from script_src to connect_src

done

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1872#issuecomment-389975084
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20180517/830b738a/attachment.html>