[openstreetmap/openstreetmap-website] Missing CORS header for /trace/*/data endpoint (#3252)

[Tom Hughes]

I mean you have to go to a lot of trouble to actually do it - to find the trace and then manually manipulate the URL and copy and paste it. Hard work compared to clicking the link to launch it on osm.org...

But yes I don't see any obvious reason not to allow it.

I also noticed that we allow access to `/oauth/*` but not to `/oauth2/*` which seems like we should change that as well?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/3252#issuecomment-874986595
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210706/7783a5bd/attachment.htm>