[openstreetmap/openstreetmap-website] Update to iD v2.13.0 (#2122)

[Bryan Housel]

> I think everybody would appreciate if new dependencies on commercial service providers (aka Radiant in this case) were not tried to be smuggled in under the radar, but at least properly raised to attention.

@simonpoole we don't smuggle things in under the radar.  We literally put it in the "release highlights".  

Anyway...  I don't think it should affect the security policy.  The only part that requests anything is these lines that will fetch a supplied `.json` file containing the rules definition:

https://github.com/openstreetmap/iD/blob/24b6e9aeec81c5f09b650dc3067e746b9b6860d0/modules/core/context.js#L483-L492

These are then turned into rules by this code:
https://github.com/openstreetmap/iD/blob/master/modules/services/maprules.js

And if any rules are defined, they will appear at save time:
https://github.com/openstreetmap/iD/blob/master/modules/validations/mapcss_checks.js

So someone running a mapping campaign could define rules like "for this editing session all the buildings must have a height tag", or "all highways must have a surface tag".

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2122#issuecomment-456910920
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20190123/1b3c8b7f/attachment.html>